Lucene search
Veracode Vulnerability DatabaseVERACODE:34476HistoryMar 02, 2022 - 5:49 a.m.
Path Traversal
2022-03-0205:49:28
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
15
0.001 Low
EPSS
Percentile
29.4%
@finastra/ssr-pages is vulnerable to path traversal. An attacker can access files outside the expected directory by providing a malicious input to the iconName parameter in the inlineSVG function of inlineSVG.helper.js
| CPE | Name | Operator | Version |
|---|---|---|---|
| @finastra/ssr-pages | le | 0.1.3 | |
| @finastra/ssr-pages | le | 0.1.3 |
Related
cve
cve
CVE-2022-24718
2022-03-01 19:15:08
osv
osv
Path Traversal in @finastra/ssr-pages
2022-03-01 22:09:18
nvd
nvd
CVE-2022-24718
2022-03-01 19:15:08
cvelist
cvelist
CVE-2022-24718 Path Traversal in ssr-pages
2022-03-01 18:45:13
github
github
Path Traversal in @finastra/ssr-pages
2022-03-01 22:09:18
prion
prion
Path traversal
2022-03-01 19:15:00