Skip to content
OpenAdvisories
Medium · 6.5 CVE-2017-0930 EUVD-2018-0435GHSA-4wch-fwmx-cf47

Directory Traversal in augustine

Published Jun 4, 2018 · Updated Sep 16, 2024 · Assigned by hackerone

Description

augustine node module suffers from a Path Traversal vulnerability due to lack of validation of url, which allows a malicious user to read content of any file with known path.

Affected products

VendorProductAffectedFixed
HackerOne augustine node module All versions —

Affected packages

EcosystemPackageAffectedFixedRecord
npm augustine <= 0.2.3 — GHSA-4wch-fwmx-cf47

References