Description (CNA)
All versions of the package files-bucket-server are vulnerable to Directory Traversal where an attacker can traverse the file system and access files outside of the intended directory.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / files-bucket-server | affected 0 before * |
CWE
CWE-22
References
- https://security.snyk.io/vuln/SNYK-JS-FILESBUCKETSERVER-9510944
- https://gist.github.com/lirantal/1f833a7d445e8cfbdcb3e75022954b35%23path-traversal-vulnerability-in-files-bucket-server
ADP enrichment
No English description supplied.
No references supplied.