Skip to content
OpenAdvisories
High · 7.5 CVE-2017-16104 EUVD-2018-0328GHSA-vxwf-pprx-wc25

Directory Traversal in citypredict.whauwiller

Published Jun 7, 2018 · Updated Sep 17, 2024 · Assigned by hackerone

Description

citypredict.whauwiller is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.

Affected products

VendorProductAffectedFixed
HackerOne citypredict.whauwiller node module All versions —

Affected packages

EcosystemPackageAffectedFixedRecord
npm citypredict.whauwiller <= 1.0.0 — GHSA-vxwf-pprx-wc25

References