~ / search / GHSA-rq9r-qvwg-829q

GHSA-rq9r-qvwg-829q

Erxes Path Traversal vulnerability

Source: GitHub Advisory Database (reviewed) High CVE-2024-57186

Packages

EcosystemPackageAffectedFixed in
npm erxes < 1.6.2 1.6.2

Details

As written in the advisory (Markdown source, shown as plain text).

In Erxes <1.6.2, an unauthenticated attacker can read arbitrary files from the system using a Path Traversal vulnerability in the /read-file endpoint handler.

References

External links from the advisory. They lead to third-party sites.