Skip to content
OpenAdvisories
High · 7.5 CVE-2017-16141 EUVD-2018-0245GHSA-7pgq-hhq9-9r27

Directory Traversal in lab6drewfusbyu

Published Jun 7, 2018 · Updated Sep 16, 2024 · Assigned by hackerone

Description

lab6drewfusbyu is an http server. lab6drewfusbyu is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.

Affected products

VendorProductAffectedFixed
HackerOne lab6drewfusbyu node module All versions —

Affected packages

EcosystemPackageAffectedFixedRecord
npm lab6drewfusbyu <= 0.1.1 — GHSA-7pgq-hhq9-9r27

References