CVE-2019-5423

EPSS 0.61%

Path Traversal in http-live-simulator

Published: 4/8/2019Modified: 11/8/2023

Description

Versions of `http-live-simulator` prior to 1.0.6 are vulnerable to Path Traversal. Due to insufficient input sanitization, attackers can access server files by using relative paths. ## Recommendation Upgrade to version 1.0.6

Affected packages (1)

npm/http-live-simulatorfrom 0, < 1.0.6

References (4)

ADVISORYhttps://github.com/advisories/GHSA-2hhw-p8mg-jrm6
ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2019-5423
WEBhttps://hackerone.com/reports/384939
WEBhttps://www.npmjs.com/advisories/799