PT-2019-17656 · Unknown · Http-Live-Simulator

Publicado 2019-04-03 · Atualizado 2019-10-09 · CVE-2019-5423

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions http-live-simulator versions prior to 1.0.6

Description The issue is related to a path traversal vulnerability that allows a remote attacker to access arbitrary paths on the file system. This is due to insufficient input sanitization, enabling attackers to access server files by using relative paths.

Recommendations Upgrade to version 1.0.6

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2019-5423

GHSA-2HHW-P8MG-JRM6

Produtos afetados

Http-Live-Simulator

Referências · 6

• https://hackerone.com/reports/384939 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2019-5423 · Nota de Segurança
• https://github.com/advisories/GHSA-2hhw-p8mg-jrm6 · Nota
• https://osv.dev/vulnerability/CVE-2019-5423 · Aviso do Fabricante
• https://osv.dev/vulnerability/GHSA-2hhw-p8mg-jrm6 · Aviso do Fabricante
• https://npmjs.com/advisories/799 · Nota