GitHub Advisoryadvisory · npm

GHSA-cgjv-rghq-qhgp Path Traversal in algo-httpserv

HIGH Published 2019-09-11 Modified 2021-08-17 Official page ↗
Ecosystem
npm
Packages
algo-httpserv
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
Weaknesses
CWE-22
Reviewed
2019-09-03

Affected packages

• npm algo-httpserv: < 1.1.2 → fixed in 1.1.2

Description

Versions of `algo-httpserv` prior to 1.1.2 are vulnerable to Path Traversal. Due to insufficient input sanitization, attackers can access server files by using relative paths. Recommendation Upgrade to version 1.1.2 or later.

Related

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References