Skip to content
OpenAdvisories
High CVE-2018-16479 EUVD-2019-0251GHSA-7c9w-qmrq-ff8r

Path Traversal in http-live-simulator

Published Feb 1, 2019 · Updated Aug 5, 2024 · Assigned by hackerone

Description

Path traversal vulnerability in http-live-simulator <1.0.7 causes unauthorized access to arbitrary files on disk by appending extra slashes after the URL.

Affected products

VendorProductAffectedFixed
HackerOne http-live-simulator <1.0.7 —

Affected packages

EcosystemPackageAffectedFixedRecord
npm http-live-simulator < 1.0.7 1.0.7 GHSA-7c9w-qmrq-ff8r

References