CVE-2020-36629mediumCWE-22

CVE-2020-36629: falha de média gravidade em SimbCo httpster

SimbCo httpster server.coffee fs.realpathSync path traversal

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar httpster+ Monitorar httpster

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.5epss 0.9%
A vulnerability classified as critical was found in SimbCo httpster. This vulnerability affects the function fs.realpathSync of the file src/server.coffee. The manipulation leads to path traversal. The exploit has been disclosed to the public and may be used. The name of the patch is d3055b3e30b40b65d30c5a06d6e053dffa7f35d0. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-216748.
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Produtos afetados
SimbCo · httpster