Path Traversal in angular-http-server

Description

Affected versions of angular-http-server are vulnerable to path traversal allowing a remote attacker to read files from the server that uses angular-http-server.

Recommendation

Update the angular-http-server package to the latest compatible version. Followings are version details:

• Affected version(s): < 1.6.0
• Patched version(s): 1.6.0

References

• GHSA-4rvg-955w-h68q
• hackerone.com
• www.npmjs.com
• CVE-2018-3713
• CWE-22
• CAPEC-310
• OWASP 2021-A1
• OWASP 2021-A6

Related Issues

• Path Traversal in angular-http-server (GHSA-vmhw-fhj6-m3g5) - Vulnerability
• Path Traversal in general-file-server - CVE-2018-3724
• Path Traversal in http-server-node - CVE-2021-23797
• Path Traversal in http-file-server - CVE-2019-5447

Tags:

npm

angular-http-server