Description (CNA)
ritp is a static web server. ritp is vulnerable to a directory traversal issue whereby an attacker can gain access to the file system by placing ../ in the URL. Access is restricted to files with a file extension, so files such as /etc/passwd are not accessible.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/ritp
- https://nodesecurity.io/advisories/432
ADP enrichment
No English description supplied.