← volver
CVE-2024-56198

path-sanitizer allows bypassing the existing filters to achieve path-traversal vulnerability

CVSS 9.3 CRITICALEPSS 0.7%CWE-22
path-sanitizer is a simple lightweight npm package for sanitizing paths to prevent Path Traversal. Prior to 3.1.0, the filters can be bypassed using .=%5c which results in a path traversal. This vulnerability is fixed in 3.1.0.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Productos afectados
cabraviva · path-sanitizer

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →