GitHub Advisoryadvisory · npm

GHSA-rv49-54qp-fw42 Path Traversal in servey

MEDIUM Published 2019-06-06 Modified 2020-08-31 Official page ↗
Ecosystem
npm
Packages
servey
Severity
Moderate
Weaknesses
CWE-22
Reviewed
2019-06-06

Affected packages

• npm servey: < 3.1.0 → fixed in 3.1.0

Description

Versions of `servey` prior to 3.x are vulnerable to Path Traversal. Due to insufficient input sanitization, attackers can access server files by using relative paths. Recommendation Upgrade to the latest version

Related

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References