PT-2019-20072 · Angular · Angular-Http-Server

Publicado 2019-05-31 · Atualizado 2019-05-31

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions angular-http-server versions prior to 1.4.4

Description The issue concerns path traversal in angular-http-server.

Recommendations Update to version 1.4.4 or later.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

GHSA-VMHW-FHJ6-M3G5

Produtos afetados

Angular-Http-Server

Referências · 5

• https://github.com/simonh1000/angular-http-server · Nota
• https://github.com/simonh1000/angular-http-server/commit/8bafc9577161469f5dea01e0b98ea9c525d063e9 · Nota
• https://npmjs.com/advisories/656 · Nota
• https://hackerone.com/reports/330349 · Nota
• https://osv.dev/vulnerability/GHSA-vmhw-fhj6-m3g5 · Aviso do Fabricante