Directory Traversal

2018-06-0804:30:26

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.004 Low

EPSS

Percentile

74.8%

JSON

open-device is vulnerable to directory traversal attacks. The attacks are possible by requesting a URL such as /..%2f..%2fetc/passwd to get sensitive information.

CPENameOperatorVersion
open-devicele4.0.1

CPE	Name	Operator	Version
	open-device	le	4.0.1

References

github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/open-device

github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/open-device

nodesecurity.io/advisories/447

0.004 Low

EPSS

Percentile

74.8%

JSON

Related for VERACODE:6744