GitHub Advisoryadvisory · npm

GHSA-crv8-r5wq-gv2w webui-aria2 Path Traversal vulnerability

HIGH Published 2023-08-22 Modified 2024-02-28 Official page ↗

Aliases: CVE-2023-39141
Ecosystem: npm
Packages: webui-aria2
Severity: High
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses: CWE-22, CWE-400
Reviewed: 2024-02-28

Affected packages

• npm webui-aria2: <= 1.0.1 (no fix yet)

Description

webui-aria2 commit 4fe2e was discovered to contain a path traversal vulnerability.

Related

Alias · CVE (1)

CVE-2023-39141 webui-aria2 commit 4fe2e was discovered to contain a path traversal vulnerability. vulnerability

Weakness · CWE (2)

CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
CWE-400 Uncontrolled Resource Consumption weakness

References