netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-pq5x-rprq-8jrj
GHSA-hpw4-m59j-9p52
This commit is contained in:
advisory-database[bot]
2023-09-13 20:27:43 +00:00
parent b8412ba545
commit cef8779c81
2 changed files with 22 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2018/07/GHSA-pq5x-rprq-8jrj/GHSA-pq5x-rprq-8jrj.json
+11 -3
View File
@@ -1,15 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-pq5x-rprq-8jrj",
"modified": "2020-08-31T18:24:41Z",
"modified": "2023-09-13T20:26:39Z",
"published": "2018-07-23T22:06:14Z",
"aliases": [
"CVE-2017-16130"
],
"summary": "Directory Traversal in exxxxxxxxxxx",
"details": "Affected versions of `exxxxxxxxxxx` resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system.\n\nThis vulnerability is only effective for files that have a file extension, which provides a partial mitigation. \n\nExample request:\n```\nGET /../../../../../../../../../../etc/passwd HTTP/1.1\nhost:foo\n```\n\n\n## Recommendation\n\nNo patch is available for this vulnerability.\n\nIt is recommended that the package is only used for local development, and if the functionality is needed for production, a different package is used instead.",
"details": "Affected versions of `exxxxxxxxxxx` resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system.\n\nThis vulnerability is only effective for files that have a file extension, which provides a partial mitigation. \n\n**Example request:**\n```http\nGET /../../../../../../../../../../etc/passwd HTTP/1.1\nhost:foo\n```\n\n\n## Recommendation\n\nNo patch is available for this vulnerability.\n\nIt is recommended that the package is only used for local development, and if the functionality is needed for production, a different package is used instead.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
{
@@ -17,6 +20,11 @@
"ecosystem": "npm",
"name": "exxxxxxxxxxx"
},
"ecosystem_specific": {
"affected_functions": [
""
]
},
"ranges": [
{
"type": "ECOSYSTEM",
advisories/github-reviewed/2020/09/GHSA-hpw4-m59j-9p52/GHSA-hpw4-m59j-9p52.json
+11 -3
View File
@@ -1,15 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-hpw4-m59j-9p52",
"modified": "2020-08-31T18:21:43Z",
"modified": "2023-09-13T20:25:57Z",
"published": "2020-09-01T17:29:13Z",
"aliases": [
"CVE-2017-16163"
],
"summary": "Directory Traversal in dylmomo",
"details": "Affected versions of `dylmomo` resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system.\n\nExample request:\n```\nGET /../../../../../../../../../../etc/passwd HTTP/1.1\nhost:foo\n```\n\n\n## Recommendation\n\nNo patch is available for this vulnerability.\n\nIt is recommended that the package is only used for local development, and if the functionality is needed for production, a different package is used instead.",
"details": "Affected versions of `dylmomo` resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system.\n\n**Example request:**\n```http\nGET /../../../../../../../../../../etc/passwd HTTP/1.1\nhost:foo\n```\n\n\n## Recommendation\n\nNo patch is available for this vulnerability.\n\nIt is recommended that the package is only used for local development, and if the functionality is needed for production, a different package is used instead.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
{
@@ -17,6 +20,11 @@
"ecosystem": "npm",
"name": "dylmomo"
},
"ecosystem_specific": {
"affected_functions": [
""
]
},
"ranges": [
{
"type": "ECOSYSTEM",