Lucene search
Veracode Vulnerability DatabaseVERACODE:35065HistoryApr 13, 2022 - 1:39 a.m.
Path Traversal
2022-04-1301:39:33
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
directory traversal
input sanitization
malicious symlink
EPSS
0.001
Percentile
21.9%
grunt is vulnerable to directory traversal. The vulnerability exists due to a lack of sanitization of input via the file.copy function allowing an attacker with write access to access restricted directory via a malicious symlink.
Related
cve
cve
CVE-2022-0436
2022-04-12 21:15:07
debian
debian
[SECURITY] [DLA 3386-1] grunt security update
2023-04-06 13:00:18
debiancve
debiancve
CVE-2022-0436
2022-04-12 21:15:07
ubuntucve
ubuntucve
CVE-2022-0436
2022-04-12 00:00:00
CVE-2022-1537
2022-05-10 00:00:00
cvelist
cvelist
CVE-2022-0436 Path Traversal in gruntjs/grunt
2022-04-12 00:00:00
osv
osv
CVE-2022-0436
2022-04-12 21:15:07
grunt - security update
2023-04-06 00:00:00
Path Traversal in Grunt
2022-04-13 00:00:16
openvas
openvas
Debian: Security Advisory (DLA-3386-1)
2023-04-07 00:00:00
Ubuntu: Security Advisory (USN-5847-1)
2023-02-08 00:00:00
github
github
Path Traversal in Grunt
2022-04-13 00:00:16
nessus
nessus
Debian DLA-3386-1 : grunt - LTS security update
2023-04-06 00:00:00
prion
prion
Path traversal
2022-04-12 21:15:00
huntr
huntr
Path Traversal in gruntjs/grunt
2022-01-26 05:17:28
nvd
nvd
CVE-2022-0436
2022-04-12 21:15:07
ubuntu
ubuntu
Grunt vulnerabilities
2023-02-07 00:00:00
