PT-2019-17656 · Unknown · Http-Live-Simulator

Published 2019-04-03 · Updated 2019-10-09 · CVE-2019-5423

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions http-live-simulator versions prior to 1.0.6

Description The issue is related to a path traversal vulnerability that allows a remote attacker to access arbitrary paths on the file system. This is due to insufficient input sanitization, enabling attackers to access server files by using relative paths.

Recommendations Upgrade to version 1.0.6

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2019-5423

GHSA-2HHW-P8MG-JRM6

Affected Products

Http-Live-Simulator

References · 6

• https://hackerone.com/reports/384939 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2019-5423 · Security Note
• https://osv.dev/vulnerability/CVE-2019-5423 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-2hhw-p8mg-jrm6 · Vendor Advisory
• https://github.com/advisories/GHSA-2hhw-p8mg-jrm6 · Note
• https://npmjs.com/advisories/799 · Note