What is GHSA-45j8-pm75-5v8x?

GHSA-45j8-pm75-5v8x is a security advisory published by GitHub Security Advisories with High severity. Path Traversal in simplehttpserver

Which CVE IDs does GHSA-45j8-pm75-5v8x cover?

GHSA-45j8-pm75-5v8x covers the following CVE IDs: CVE-2018-16493. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-45j8-pm75-5v8x?

GHSA-45j8-pm75-5v8x affects 1 product, including: npm/static-resource-server:\u003c= 1.7.2.

GHSA-45j8-pm75-5v8xHigh

Path Traversal in simplehttpserver

Vendor

GitHub Security Advisories

Published

February 7, 2019

Last Modified

January 9, 2023

🔗 CVE IDs covered (1)

CVE-2018-16493 →

📋 Description

Versions of simplehttpserver prior to 0.2.1 are vulnerable to Path Traversal. Due to insufficient input sanitization, attackers can access server files by using relative paths.

Recommendation

Upgrade to version 0.2.1 or later.

🎯 Affected products1

npm/static-resource-server:<= 1.7.2

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2018-16493
https://hackerone.com/reports/432600
https://github.com/advisories/GHSA-45j8-pm75-5v8x
https://www.npmjs.com/advisories/967
https://hackerone.com/reports/357109
https://www.npmjs.com/advisories/968