Unauthorized File Access in glance

概要

参考情報

• hackerone.com/reports/490379 · WEB
• npmjs.com/advisories/811 · WEB

glance のその他の脆弱性

• CVE-2022-25937中 6.5Versions of the package glance before 3.0.9 are vulnerable to Directory Traversal that allows users to read files outside the public root di…
• CVE-2018-3748中 6.1There is a Stored XSS vulnerability in the glance node module versions <= 3.0.5. File name, which contains malicious HTML (eg. embedded ifra…
• CVE-2018-3715中 6.5glance node module before 3.0.4 suffers from a Path Traversal vulnerability due to lack of validation of path passed to it, which allows a m…