Description
Directory traversal vulnerability in swig-templates thru 2.0.4 and swig thru 1.4.2, allows attackers to read arbitrary files via the include or extends tags.
Remediation
References
https://github.com/node-swig/swig-templates/issues/88
Related Vulnerabilities
CVE-2020-7616 Vulnerability in npm package express-mock-middleware
CVE-2019-5437 Vulnerability in npm package harp
CVE-2012-5784 Vulnerability in maven package org.apache.axis:axis
CVE-2021-41097 Vulnerability in npm package aurelia-path
CVE-2015-0250 Vulnerability in maven package org.eclipse.birt.runtime:org.apache.batik.dom