Skip to content
OpenAdvisories
High · 7.5 CVE-2017-16199 EUVD-2020-1334GHSA-w7jg-972m-rphv

Directory Traversal in susu-sum

Published Jun 7, 2018 · Updated Sep 16, 2024 · Assigned by hackerone

Description

susu-sum is a static file server. susu-sum is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.

Affected products

VendorProductAffectedFixed
HackerOne susu-sum node module All versions —

Affected packages

EcosystemPackageAffectedFixedRecord
npm susu-sum >= 0.0.0 — GHSA-w7jg-972m-rphv

References