GitHub Advisoryadvisory · npm

GHSA-f3vw-587g-r29g Path Traversal in sapper

CRITICAL Published 2020-09-03 Modified 2020-08-31 Official page ↗
Ecosystem
npm
Packages
sapper
Severity
Critical
Weaknesses
CWE-22
Reviewed
2020-08-31

Affected packages

• npm sapper: < 0.27.11 → fixed in 0.27.11

Description

Versions of `sapper` prior to 0.27.11 are vulnerable to Path Traversal. It is possible to access sensitive files on the server through HTTP requests containing URL-encoded `../`. You may test a `sapper` application running in prod mode with `curl -vvv http://localhost:3000/client/750af05c3a69ddc6073a/%252e%252e/%252e%252e/%252e%252e/%252e%252e/%252e%252e/%252e%252e/%252e%252e/%252e%252e/etc/passwd`. Recommendation Upgrade to version 0.27.11 or later.

Related

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References