| Package | Affected versions | Patched versions |
|---|---|---|
| geddy | = 13.0.7 | |
| geddy | < 13.0.8 | 13.0.8 |
Versions 13.0.8 and earlier of geddy are vulnerable to a directory traversal attack via URI encoded attack vectors.
http://localhost:4000/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd
Update geddy to version >= 13.0.8
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free