PT-2019-20014 · Ltt.Js · Ltt.Js

Publicado 2019-05-30 · Atualizado 2019-05-30

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions ltt.js versions (affected versions not specified)

Description The issue allows a malicious actor to access files outside of the intended directory root, potentially disclosing private files on the vulnerable system. This is achieved through a directory traversal vulnerability, where relative file paths are resolved. For example, a malicious request can be made to access sensitive files, such as /../../../../../../../../../../etc/passwd.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

GHSA-6QH5-WX38-Q92G

Produtos afetados

Ltt.Js

Referências · 4

• 🔥 https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/ltt.js · Exploit
• 🔥 https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/ltt.js · Exploit
• https://npmjs.com/advisories/411 · Nota
• https://osv.dev/vulnerability/GHSA-6qh5-wx38-q92g · Aviso do Fabricante