~ / search / GHSA-grv5-w5vr-8h98

GHSA-grv5-w5vr-8h98

Path Traversal in droppy

Source: GitHub Advisory Database (reviewed) Moderate CVE-2020-7757

Packages

EcosystemPackageAffectedFixed in
npm droppy <= 12.2.0 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

This affects all versions of package droppy. It is possible to traverse directories to fetch configuration files from a droopy server.

References

External links from the advisory. They lead to third-party sites.