PT-2019-20072 · Angular · Angular-Http-Server

Published 2019-05-31 · Updated 2019-05-31

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions angular-http-server versions prior to 1.4.4

Description The issue concerns path traversal in angular-http-server.

Recommendations Update to version 1.4.4 or later.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

GHSA-VMHW-FHJ6-M3G5

Affected Products

Angular-Http-Server

References · 5

• https://osv.dev/vulnerability/GHSA-vmhw-fhj6-m3g5 · Vendor Advisory
• https://github.com/simonh1000/angular-http-server · Note
• https://github.com/simonh1000/angular-http-server/commit/8bafc9577161469f5dea01e0b98ea9c525d063e9 · Note
• https://npmjs.com/advisories/656 · Note
• https://hackerone.com/reports/330349 · Note