Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
path-sanitizer allows bypassing the existing filters to achieve path-traversal vulnerability
Vulnerability Description
path-sanitizer is a simple lightweight npm package for sanitizing paths to prevent Path Traversal. Prior to 3.1.0, the filters can be bypassed using .=%5c which results in a path traversal. This vulnerability is fixed in 3.1.0.
CVSS Information
N/A
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Vulnerability Title
path-sanitizer 路径遍历漏洞
Vulnerability Description
path-sanitizer是Cabra个人开发者的一个简单的轻量级 npm 包。 path-sanitizer 3.1.0之前版本存在路径遍历漏洞。攻击者利用该漏洞可以访问系统上的敏感文件或目录。
CVSS Information
N/A
Vulnerability Type
N/A