Description

A path traversal vulnerability in localhost-now npm package version 1.0.2 allows the attackers to read content of arbitrary files on the remote server.

Remediation

References

https://hackerone.com/reports/334837

Related Vulnerabilities

CVE-2017-16114 Vulnerability in maven package org.webjars.npm:marked

CVE-2013-5960 Vulnerability in maven package org.owasp.esapi:esapi

CVE-2023-30465 Vulnerability in maven package org.apache.inlong:manager-pojo

CVE-2021-21266 Vulnerability in maven package org.openhab.addons.bundles:org.openhab.binding.hpprinter

CVE-2018-16474 Vulnerability in npm package tianma-static

Severity

High

Classification

CWE-22 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Exploit Third Party Advisory