Ecosyste.ms: Advisories

Security Advisories: MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTIzeHAtajczNy0yODJ2

Path Traversal in takeapeek

All versions of takeapeek are vulnerable to path traversal exposing files and directories.

Recommendation

As no fix is currently available for this vulnerability is it is our recommendation to use another static file server.

Permalink: https://github.com/advisories/GHSA-23xp-j737-282v
JSON: https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTIzeHAtajczNy0yODJ2
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Moderate
Classification: General
Published: over 5 years ago
Updated: 8 months ago

CVSS Score: 5.3
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Identifiers: GHSA-23xp-j737-282v, CVE-2018-16473
References:

• https://nvd.nist.gov/vuln/detail/CVE-2018-16473
• https://hackerone.com/reports/403736
• https://github.com/advisories/GHSA-23xp-j737-282v
• https://github.com/nodejs/security-wg/blob/master/vuln/npm/478.json
• https://www.npmjs.com/advisories/740

Blast Radius: 0.0

Affected Packages