Skip to content
OpenAdvisories
High CVE-2019-5423 EUVD-2019-0400GHSA-2hhw-p8mg-jrm6

Path Traversal in http-live-simulator

Published Apr 3, 2019 · Updated Aug 4, 2024 · Assigned by hackerone

Description

Path traversal vulnerability in http-live-simulator npm package version 1.0.5 allows arbitrary path to be accessed on the file system by a remote attacker.

Affected products

VendorProductAffectedFixed
Npm http-live-simulator 1.0.5 —

Affected packages

EcosystemPackageAffectedFixedRecord
npm http-live-simulator < 1.0.6 1.0.6 GHSA-2hhw-p8mg-jrm6

References