GitHub Advisoryadvisory · npm

GHSA-vc6r-4x6g-mmqc Path Traversal in m-server

MEDIUM Published 2019-06-11 Modified 2020-08-31 Official page ↗
Ecosystem
npm
Packages
m-server
Severity
Moderate
Weaknesses
CWE-22
Reviewed
2019-06-11

Affected packages

• npm m-server: < 1.4.2 → fixed in 1.4.2

Description

Versions of `m-server` before 1.4.2 are vulnerable to path traversal allowing a remote attacker to display content of arbitrary files from the server. Recommendation Update to version 1.4.2 or later.

Related

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References