Directory Traversal

2024-05-2411:42:12

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

vulnerability

input validation

directory traversal

github

software

6.8 Medium

AI Score

Confidence

High

0 Low

EPSS

Percentile

0.0%

JSON

github.com/stakater/forecastle is vulnerable to Directory Traversal. The vulnerability is due to insufficient input validation, allowing attackers to traverse directories by including “…/” sequences in requests.

CPENameOperatorVersion
github.com/stakater/forecastlelev1.0.139
github.com/stakater/forecastlelev1.0.139

CPE	Name	Operator	Version
	github.com/stakater/forecastle	le	v1.0.139
	github.com/stakater/forecastle	le	v1.0.139

References

github.com/advisories/GHSA-x8xm-wrjq-5g54

github.com/sahar042/CVE-2023-40297