Path Traversal in localhost-now - localhost-now - GHSA-2gjg-5x33-mmp2

Description

Versions of localhost-now before 1.0.2 are vulnerable to path traversal. This allows a remote attacker to read the content of an arbitrary file.

Recommendation

Update the localhost-now package to the latest compatible version. Followings are version details:

• Affected version(s): < 1.0.2
• Patched version(s): 1.0.2

References

• GHSA-2gjg-5x33-mmp2
• hackerone.com
• www.npmjs.com
• CVE-2018-3729
• CWE-22
• CAPEC-310
• OWASP 2021-A1
• OWASP 2021-A6

Related Issues

• Path Traversal in localhost-now - CVE-2019-5416
• Path Traversal in localhost-now - localhost-now - Vulnerability
• Jan path traversal vulnerability - @janhq/core - GHSA-5jqc-qj57-4hrc - CVE-2024-36857
• Path Traversal in mcstatic - CVE-2018-3730

You might also like:

Apache and Express Path Traversal plus Nginx Restriction Bypass Tests with SmartScanner

10 Secure Coding Best Practices to Follow in Every Project

Update Cheat Sheet for Developers

Tags:

npm

localhost-now