Description

Directory traversal vulnerability in swig-templates thru 2.0.4 and swig thru 1.4.2, allows attackers to read arbitrary files via the include or extends tags.

Remediation

References

https://github.com/node-swig/swig-templates/issues/88

Related Vulnerabilities

CVE-2020-28496 Vulnerability in maven package org.webjars.npm:three

CVE-2019-5786 Vulnerability in npm package electron

CVE-2023-3691 Vulnerability in maven package org.webjars:layui

CVE-2019-11819 Vulnerability in maven package org.opencms:org.opencms.workplace.tools.accounts

CVE-2018-11696 Vulnerability in npm package node-sass

Severity

High

Classification

CWE-22 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Exploit Issue Tracking