| Package | Affected versions | Patched versions |
|---|---|---|
| nodejs file system provider | = 0102271 |
The Syncfusion EJ2 Node File Provider 0102271 is vulnerable to filesystem-server.js directory traversal. As a result, an unauthenticated attacker can: - On Windows, list files in any directory, read any file, delete any file, upload any file to any directory accessible by the web server. - On Linux, read any file, download any directory, delete any file, upload any file to any directory accessible by the web server.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free