Skip to content
OpenAdvisories
High · 7.5 CVE-2017-16037 EUVD-2018-0252GHSA-94x5-94wf-m445

Directory Traversal in gomeplus-h5-proxy

Published Jun 4, 2018 · Updated Sep 16, 2024 · Assigned by hackerone

Description

`gomeplus-h5-proxy` is vulnerable to a directory traversal issue, allowing attackers to access any file in the system by placing '../' in the URL.

Affected products

VendorProductAffectedFixed
HackerOne gomeplus-h5-proxy node module All versions —

Affected packages

EcosystemPackageAffectedFixedRecord
npm gomeplus-h5-proxy <= 1.0.15 — GHSA-94x5-94wf-m445

References