GitHub Advisoryadvisory · npm

GHSA-2hhw-p8mg-jrm6 Path Traversal in http-live-simulator

HIGH Published 2019-04-08 Modified 2020-08-31 Official page ↗
Aliases
CVE-2019-5423
Ecosystem
npm
Packages
http-live-simulator
Severity
High
Weaknesses
CWE-22
Reviewed
2020-06-16

Affected packages

• npm http-live-simulator: < 1.0.6 → fixed in 1.0.6

Description

Versions of `http-live-simulator` prior to 1.0.6 are vulnerable to Path Traversal. Due to insufficient input sanitization, attackers can access server files by using relative paths. Recommendation Upgrade to version 1.0.6

Related

Alias · CVE (1)

  • CVE-2019-5423 Path traversal vulnerability in http-live-simulator npm package version 1.0.5 allows arbitrary path to be accessed on the file system by a… vulnerability

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References