Skip to content
OpenAdvisories
High · 7.5 CVE-2017-16174 EUVD-2018-0295GHSA-m874-69ww-w7jq

Directory Traversal in whispercast

Published Jun 7, 2018 · Updated Sep 16, 2024 · Assigned by hackerone

Description

whispercast is a file server. whispercast is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.

Affected products

VendorProductAffectedFixed
HackerOne whispercast node module All versions —

Affected packages

EcosystemPackageAffectedFixedRecord
npm whispercast <= 0.1.0 — GHSA-m874-69ww-w7jq

References