Description

Path traversal vulnerability in http-live-simulator <1.0.7 causes unauthorized access to arbitrary files on disk by appending extra slashes after the URL.

Remediation

References

https://hackerone.com/reports/411405

Related Vulnerabilities

CVE-2023-40817 Vulnerability in maven package org.opencrx:opencrx-core-models

CVE-2023-35146 Vulnerability in maven package org.jenkins.plugin.templateworkflows:template-workflows

CVE-2022-2576 Vulnerability in maven package org.eclipse.californium:californium-core

CVE-2021-43138 Vulnerability in maven package org.webjars:async

CVE-2021-23381 Vulnerability in npm package killing

Severity

High

Classification

CWE-22 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Exploit Issue Tracking Third Party Advisory