Description
Directory traversal vulnerability in swig-templates thru 2.0.4 and swig thru 1.4.2, allows attackers to read arbitrary files via the include or extends tags.
Remediation
References
https://github.com/node-swig/swig-templates/issues/88
Related Vulnerabilities
CVE-2023-39106 Vulnerability in maven package com.alibaba.nacos:nacos-spring-context
CVE-2021-21430 Vulnerability in maven package org.openapitools:openapi-generator-project
CVE-2019-20149 Vulnerability in npm package kind-of
CVE-2020-7760 Vulnerability in maven package org.webjars.bowergithub.codemirror:codemirror
CVE-2020-7656 Vulnerability in maven package org.webjars.bower:jquery