Description

Directory traversal vulnerability in swig-templates thru 2.0.4 and swig thru 1.4.2, allows attackers to read arbitrary files via the include or extends tags.

Remediation

References

https://github.com/node-swig/swig-templates/issues/88

Related Vulnerabilities

CVE-2020-28425 Vulnerability in npm package curljs

CVE-2022-22947 Vulnerability in maven package org.springframework.cloud:spring-cloud-gateway

CVE-2021-23419 Vulnerability in npm package open-graph

CVE-2017-16821 Vulnerability in maven package org.b3log:symphony

CVE-2023-26122 Vulnerability in npm package safe-eval

Severity

High

Classification

CWE-22 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Exploit Issue Tracking