Path Traversal in http-live-simulator

ÉLEVÉE 7.5CVE-2019-5423 · GHSA-2hhw-p8mg-jrm6 · Published 03/04/2019 · updated 17/06/2026

En bref

CVE-2019-5423 est une vulnérabilité ÉLEVÉE (CVSS 7.5) touchant http-live-simulator (http-live-simulator project), http-live-simulator.
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 2.8%, plus élevée que 86.7% des vulnérabilités.
Correctif : mettre à jour vers 1.0.6 ou plus récent.

Package	Affected versions	Patched versions
http-live-simulator http-live-simulator_project	`= 1.0.5`	No fix yet
http-live-simulator npm	`< 1.0.6`	`1.0.6`

Description

Versions of http-live-simulator prior to 1.0.6 are vulnerable to Path Traversal. Due to insufficient input sanitization, attackers can access server files by using relative paths.

Recommendation

Upgrade to version 1.0.6

NVD description

Path traversal vulnerability in http-live-simulator npm package version 1.0.5 allows arbitrary path to be accessed on the file system by a remote attacker.

References

nvd.nist.gov/vuln/detail/CVE-2019-5423 · ADVISORY
hackerone.com/reports/384939 · WEB
GitHub Advisory GHSA-2hhw-p8mg-jrm6 · ADVISORY
npmjs.com/advisories/799 · WEB

Autres vulnérabilités de http-live-simulator

Tout voir →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free