Description

`gomeplus-h5-proxy` is vulnerable to a directory traversal issue, allowing attackers to access any file in the system by placing '../' in the URL.

Remediation

References

https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/gomeplus-h5-proxy

https://nodesecurity.io/advisories/350

Related Vulnerabilities

CVE-2020-7672 Vulnerability in npm package mosc

CVE-2022-44310 Vulnerability in npm package ecdh

CVE-2022-25916 Vulnerability in npm package mt7688-wiscan

CVE-2016-10528 Vulnerability in npm package restafary

CVE-2020-7646 Vulnerability in npm package curlrequest

Severity

High

Classification

CWE-22 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Exploit Third Party Advisory