GitHub Advisoryadvisory · npm

GHSA-v7cp-5326-54fh Path Traversal in bruteser

HIGH Published 2020-09-03 Modified 2020-08-31 Official page ↗
Ecosystem
npm
Packages
bruteser
Severity
High
Weaknesses
CWE-22
Reviewed
2020-08-31

Affected packages

• npm bruteser: < 0.1.0 → fixed in 0.1.0

Description

Versions of `bruteser` prior to 0.1.0 are vulnerable to Path Traversal. The package fails to sanitize URLs, allowing attackers to access server files outside of the served folder using relative paths. Recommendation Upgrade to version 0.1.0 or later.

Related

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References