GHSA-7c9w-qmrq-ff8rHigh

Path Traversal in http-live-simulator

Published
February 7, 2019
Last Modified
January 9, 2023

🔗 CVE IDs covered (1)

CVE-2018-16479 →

📋 Description

Versions of http-live-simulator prior to 1.0.7 are vulnerable to Path Traversal. Due to insufficient input sanitization, attackers can access server files by using relative paths. For example: curl --path-as-is http://localhost:8080//../../../../etc/passwd.

Recommendation

Upgrade to version 1.0.7

🎯 Affected products1

  • npm/http-live-simulator:< 1.0.7

🔗 References (5)