Description

myprolyz is a static file server. myprolyz is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.

Remediation

References

https://nodesecurity.io/advisories/386

https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/myprolyz

Related Vulnerabilities

CVE-2019-10285 Vulnerability in maven package org.jenkins-ci.plugins:minio-storage

CVE-2022-4521 Vulnerability in maven package org.wso2.carbon.registry:org.wso2.carbon.registry.profiles.ui

CVE-2019-10158 Vulnerability in maven package org.infinispan:infinispan-spring5-embedded

CVE-2019-10407 Vulnerability in maven package hudson.plugins:project-inheritance

CVE-2017-15879 Vulnerability in npm package keystone

Severity

High

Classification

CWE-22 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Third Party Advisory Exploit