GHSA-f3vw-587g-r29g

Source

https://github.com/advisories/GHSA-f3vw-587g-r29g

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2020/09/GHSA-f3vw-587g-r29g/GHSA-f3vw-587g-r29g.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-f3vw-587g-r29g

Published

2020-09-03T15:50:38Z

Modified

2020-08-31T19:01:20Z

Summary

Path Traversal in sapper

Details

Versions of sapper prior to 0.27.11 are vulnerable to Path Traversal. It is possible to access sensitive files on the server through HTTP requests containing URL-encoded ../.

You may test a sapper application running in prod mode with curl -vvv http://localhost:3000/client/750af05c3a69ddc6073a/%252e%252e/%252e%252e/%252e%252e/%252e%252e/%252e%252e/%252e%252e/%252e%252e/%252e%252e/etc/passwd.

Recommendation

Upgrade to version 0.27.11 or later.

Database specific

{
    "cwe_ids":  [
        "CWE-22"
    ],
    "github_reviewed":  true,
    "github_reviewed_at":  "2020-08-31T19:01:20Z",
    "nvd_published_at":  null,
    "severity":  "CRITICAL"
}

References

https://www.npmjs.com/advisories/1494

Affected packages

npm / sapper

Package

Name: sapper; View open source insights on deps.dev
Purl: pkg:npm/sapper

Affected ranges

Type: SEMVER
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.27.11

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2020/09/GHSA-f3vw-587g-r29g/GHSA-f3vw-587g-r29g.json"