Description

Path traversal vulnerability in http-live-simulator <1.0.7 causes unauthorized access to arbitrary files on disk by appending extra slashes after the URL.

Remediation

References

https://hackerone.com/reports/411405

Related Vulnerabilities

CVE-2019-10788 Vulnerability in npm package im-metadata

CVE-2021-43807 Vulnerability in maven package org.opencastproject:opencast-common

CVE-2020-5259 Vulnerability in maven package org.webjars.npm:dojox

CVE-2020-36144 Vulnerability in npm package redash

CVE-2020-28441 Vulnerability in npm package conf-cfg-ini

Severity

High

Classification

CWE-22 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Exploit Issue Tracking Third Party Advisory