~ / search / GHSA-2977-5php-6789

GHSA-2977-5php-6789

Erxes Path Traversal vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2024-57189

Packages

EcosystemPackageAffectedFixed in
npm erxes < 1.6.2 1.6.2

Details

As written in the advisory (Markdown source, shown as plain text).

In Erxes <1.6.2, an authenticated attacker can write to arbitrary files on the system using a Path Traversal vulnerability in the importHistoriesCreate GraphQL mutation handler.

References

External links from the advisory. They lead to third-party sites.