GitHub Advisoryadvisory · npm

GHSA-23xp-j737-282v Path Traversal in takeapeek

MEDIUM Published 2018-11-06 Modified 2023-09-07 Official page ↗
Aliases
CVE-2018-16473
Ecosystem
npm
Packages
takeapeek
Severity
Moderate
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-22
Reviewed
2020-06-16

Affected packages

• npm takeapeek: <= 0.2.2 (no fix yet)

Description

All versions of `takeapeek` are vulnerable to path traversal exposing files and directories. Recommendation As no fix is currently available for this vulnerability is it is our recommendation to use another static file server.

Related

Alias · CVE (1)

  • CVE-2018-16473 A path traversal in takeapeek module versions <=0.2.2 allows an attacker to list directory and files. vulnerability

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References