CVE-2018-16479
EPSS 0.68%Path Traversal in http-live-simulator
發布日:2019/2/7修改日:2023/11/8
描述
Versions of `http-live-simulator` prior to 1.0.7 are vulnerable to Path Traversal. Due to insufficient input sanitization, attackers can access server files by using relative paths. For example: `curl --path-as-is http://localhost:8080//../../../../etc/passwd`. ## Recommendation Upgrade to version 1.0.7
受影響套件(1)
- npm/http-live-simulatorfrom 0, < 1.0.7