Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:39271
HistoryFeb 15, 2023 - 2:32 a.m.

Path Traversal

2023-02-1502:32:36
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
glance vulnerability
path traversal
software vulnerability
index.js
relative paths
file access

0.001 Low

EPSS

Percentile

26.5%

glance is vulnerable to Path Traversal. The vulnerability exists because the library does not properly sanitize relative paths in index.js, allowing an attacker to read files outside the public root directory by providing malicious relative paths.

CPENameOperatorVersion
glancele3.0.8
glancele3.0.8

0.001 Low

EPSS

Percentile

26.5%

Related for VERACODE:39271