GitHub Advisoryadvisory · npm

GHSA-v3px-6cc8-f8j3 Path traversal in servey

HIGH Published 2021-05-07 Modified 2021-05-07 Official page ↗

Aliases: CVE-2020-8214
Ecosystem: npm
Packages: servey
Severity: High
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses: CWE-22
Reviewed: 2021-05-07

Affected packages

• npm servey: < 3.3.2 → fixed in 3.3.2

Description

A path traversal vulnerability in servey versions prior to 3.3.2 allows an attacker to read content of any arbitrary file.

Related

Alias · CVE (1)

CVE-2020-8214 A path traversal vulnerability in servey version < 3 allows an attacker to read content of any arbitrary file. vulnerability

Weakness · CWE (1)

CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References