Lucene search
GoogleOSV:GHSA-7C9W-QMRQ-FF8RHistoryFeb 07, 2019 - 6:14 p.m.
Path Traversal in http-live-simulator
2019-02-0718:14:21
Google
osv.dev
6
0.004 Low
EPSS
Percentile
75.2%
Versions of http-live-simulator prior to 1.0.7 are vulnerable to Path Traversal. Due to insufficient input sanitization, attackers can access server files by using relative paths. For example: curl --path-as-is http://localhost:8080//../../../../etc/passwd.
Recommendation
Upgrade to version 1.0.7
| CPE | Name | Operator | Version |
|---|---|---|---|
| http-live-simulator | lt | 1.0.7 |
Related
nodejs
nodejs
Path Traversal
2019-01-23 19:11:48
prion
prion
Path traversal
2019-02-01 18:29:00
hackerone
hackerone
nvd
nvd
CVE-2018-16479
2019-02-01 18:29:00
cvelist
cvelist
CVE-2018-16479
2019-02-01 18:00:00
github
github
Path Traversal in http-live-simulator
2019-02-07 18:14:21
cve
cve
CVE-2018-16479
2019-02-01 18:29:00
veracode
veracode
Directory Traversal
2018-09-24 19:48:30