Description

Directory traversal vulnerability in swig-templates thru 2.0.4 and swig thru 1.4.2, allows attackers to read arbitrary files via the include or extends tags.

Remediation

References

https://github.com/node-swig/swig-templates/issues/88

Related Vulnerabilities

CVE-2022-41854 Vulnerability in maven package org.yaml:snakeyaml

CVE-2020-36184 Vulnerability in maven package com.fasterxml.jackson.core:jackson-databind

CVE-2018-20801 Vulnerability in npm package highcharts

CVE-2023-22491 Vulnerability in npm package gatsby-transformer-remark

CVE-2022-25885 Vulnerability in npm package hummus

Severity

High

Classification

CWE-22 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Exploit Issue Tracking