CVE-2018-16479 - Path traversal vulnerability in http-live-simulator <1.0.7 causes unauthorized access to arbitrary files on disk by appending extra slashes after the URL

Back Back to CVE browser

HIGH

Path traversal vulnerability in http-live-simulator <1.0.7 causes unauthorized access to arbitrary files on disk by appending extra slashes after the URL

Published Feb 1, 2019

7.5

HIGH

CVSS 3.0

EPSS 1.65%

Description

Path traversal vulnerability in http-live-simulator <1.0.7 causes unauthorized access to arbitrary files on disk by appending extra slashes after the URL.

Affected products

Vendor HackerOne Product n/a Default
n/a
- Version
  <1.0.7
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

HackerOne

n/a

Version	Status	Constraints
<1.0.7	affected	-

Ecosystem	Package	Introduced	Fixed
npm	http-live-simulator	0	1.0.7

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-22

Path Traversal

References (5)

https://github.com/advisories/GHSA-7c9w-qmrq-ff8r
Advisory
https://github.com/nodejs/security-wg/blob/master/vuln/npm/486.json
https://hackerone.com/reports/411405
x_refsource_MISCExploitIssue TrackingThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-16479
https://www.npmjs.com/advisories/772

Link	Providers	Tags
https://github.com/advisories/GHSA-7c9w-qmrq-ff8r		Advisory
https://github.com/nodejs/security-wg/blob/master/vuln/npm/486.json
https://hackerone.com/reports/411405		x_refsource_MISCExploitIssue TrackingThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-16479
https://www.npmjs.com/advisories/772