Path Traversal in servey

MITTELGHSA-rv49-54qp-fw42 · Published 06/06/2019 · updated 31/08/2020

Kurz gesagt

GHSA-rv49-54qp-fw42 ist eine Schwachstelle (MITTEL) in servey.
Abhilfe: auf 3.1.0 oder neuer aktualisieren.

Package	Affected versions	Patched versions
servey npm	`< 3.1.0`	`3.1.0`

Description

Versions of servey prior to 3.x are vulnerable to Path Traversal. Due to insufficient input sanitization, attackers can access server files by using relative paths.

Recommendation

Upgrade to the latest version

References

typeorm/typeorm commit d46c8b0 · WEB
hackerone.com/reports/355501 · WEB
npmjs.com/advisories/802 · WEB

Weitere Schwachstellen in servey

Alle anzeigen →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free