Skip to content
OpenAdvisories
High · 7.5 CVE-2018-3766 EUVD-2018-0460GHSA-m8cr-q935-8j67

Path Traversal in buttle

Published Jul 5, 2018 · Updated Aug 5, 2024 · Assigned by hackerone

Vendor: https://github.com/jtrussell Product: buttle Package: buttle Ecosystem: npm

Description

Path traversal in buttle module versions <= 0.2.0 allows to read any file in the server.

Affected products

VendorProductAffectedFixed
https://github.com/jtrussell buttle Not fixed —

Affected packages

EcosystemPackageAffectedFixedRecord
npm buttle <= 0.2.0 — GHSA-m8cr-q935-8j67

References