GHSA-3hvm-hgpw-rx4jHighCVSS 7.5

Path Traversal in knightjs

Published
November 6, 2018
Last Modified
September 12, 2023

🔗 CVE IDs covered (1)

📋 Description

All versions of knightjs are vulnerable to Path Traversal.

This vulnerability allows an attacker to read content of arbitrary files on the server due to lack of input validation.

Recommendation

As there is currently no fix for this module we recommend not using this module in production environments.

🎯 Affected products1

  • npm/knightjs:<= 0.0.1

🔗 References (5)