Description

Path traversal in buttle module versions <= 0.2.0 allows to read any file in the server.

Remediation

References

https://hackerone.com/reports/358112

Related Vulnerabilities

CVE-2023-26486 Vulnerability in maven package org.webjars.bowergithub.vega:vega

CVE-2023-34612 Vulnerability in maven package com.helger.commons:ph-json

CVE-2021-25933 Vulnerability in maven package org.opennms:opennms-webapp

CVE-2021-33041 Vulnerability in npm package vmd

CVE-2022-2063 Vulnerability in npm package nocodb

Severity

High

Classification

CWE-22 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Exploit Issue Tracking Third Party Advisory