~ / search / GHSA-2hhw-p8mg-jrm6

GHSA-2hhw-p8mg-jrm6

Path Traversal in http-live-simulator

Source: GitHub Advisory Database (reviewed) High CVE-2019-5423

Packages

EcosystemPackageAffectedFixed in
npm http-live-simulator < 1.0.6 1.0.6

Details

As written in the advisory (Markdown source, shown as plain text).

Versions of `http-live-simulator` prior to 1.0.6 are vulnerable to Path Traversal. Due to insufficient input sanitization, attackers can access server files by using relative paths. ## Recommendation Upgrade to version 1.0.6

References

External links from the advisory. They lead to third-party sites.