Description

Path traversal vulnerability in http-live-simulator <1.0.7 causes unauthorized access to arbitrary files on disk by appending extra slashes after the URL.

Remediation

References

https://hackerone.com/reports/411405

Related Vulnerabilities

CVE-2021-23448 Vulnerability in npm package config-handler

CVE-2022-29894 Vulnerability in npm package strapi

CVE-2021-3822 Vulnerability in npm package jsoneditor

CVE-2019-10785 Vulnerability in maven package org.webjars.bowergithub.dojo:dojox

CVE-2020-15168 Vulnerability in npm package node-fetch

Severity

High

Classification

CWE-22 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Exploit Issue Tracking Third Party Advisory