GHSA-7c9w-qmrq-ff8r
Path Traversal in http-live-simulator
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | http-live-simulator | < 1.0.7 | 1.0.7 |
Details
As written in the advisory (Markdown source, shown as plain text).
Versions of `http-live-simulator` prior to 1.0.7 are vulnerable to Path Traversal. Due to insufficient input sanitization, attackers can access server files by using relative paths. For example: `curl --path-as-is http://localhost:8080//../../../../etc/passwd`.
## Recommendation
Upgrade to version 1.0.7
References
External links from the advisory. They lead to third-party sites.