What is GHSA-r4r9-mgjc-g6q3?

GHSA-r4r9-mgjc-g6q3 is a security advisory published by GitHub Security Advisories with High severity. Path Traversal in 626

Which CVE IDs does GHSA-r4r9-mgjc-g6q3 cover?

GHSA-r4r9-mgjc-g6q3 covers the following CVE IDs: CVE-2018-3727. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-r4r9-mgjc-g6q3?

GHSA-r4r9-mgjc-g6q3 has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

Which products are affected by GHSA-r4r9-mgjc-g6q3?

GHSA-r4r9-mgjc-g6q3 affects 1 product, including: npm/626:\u003e= 0.0.0.

GHSA-r4r9-mgjc-g6q3HighCVSS 7.5

Path Traversal in 626

Vendor

GitHub Security Advisories

Published

September 1, 2020

Last Modified

June 1, 2023

🔗 CVE IDs covered (1)

CVE-2018-3727 →

📋 Description

All versions of 626 are vulnerable to path traversal. This enables a remote attacker to read arbitrary files from the remote server using this module.

Recommendation

No fix is currently available for this vulnerability. It is our recommendation to not install or use this module at this time.

🎯 Affected products1

npm/626:>= 0.0.0

🔗 References (3)

https://hackerone.com/reports/311216
https://nvd.nist.gov/vuln/detail/CVE-2018-3727
https://github.com/advisories/GHSA-r4r9-mgjc-g6q3