Skip to content
OpenAdvisories

Package · npm

buttle

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High —
    CVE-2019-5422

    Cross-Site Scripting in buttle

    XSS in buttle npm package version 0.2.0 causes execution of attacker-provided code in the victim's browser when an attacker creates an arbitrary file on the server.

    npm buttle buttle npm
  • High 7.5
    CVE-2018-3766

    Path Traversal in buttle

    Path traversal in buttle module versions <= 0.2.0 allows to read any file in the server.

    https://github.com/jtrussell buttle buttle npm