Description
Directory traversal vulnerability in swig-templates thru 2.0.4 and swig thru 1.4.2, allows attackers to read arbitrary files via the include or extends tags.
Remediation
References
https://github.com/node-swig/swig-templates/issues/88
Related Vulnerabilities
CVE-2021-32854 Vulnerability in npm package textangular
CVE-2020-35202 Vulnerability in maven package org.igniterealtime.openfire.plugins:dbaccess
CVE-2023-26106 Vulnerability in npm package dot-lens
CVE-2018-20801 Vulnerability in maven package org.webjars.npm:highcharts
CVE-2023-4853 Vulnerability in maven package io.quarkus:quarkus-keycloak-authorization