Path Traversal in socket.io-file

Description

All versions of socket.io-file are vulnerable to Path Traversal. The package fails to sanitize user input and uses it to generate the file upload paths. The socket.io-file::createFile message contains a name option that is passed directly to path.join().

Recommendation

No fix is available yet. Followings are affected versions:

• <= 2.0.31

References

• GHSA-9h4g-27m8-qjrg
• www.npmjs.com
• CVE-2020-15779
• CWE-22
• CAPEC-310
• OWASP 2021-A1
• OWASP 2021-A6

Related Issues

• File restriction bypass in socket.io-file - CVE-2020-24807
• MJML vulnerable to path traversal - CVE-2020-12827
• Agnai File Disclosure Vulnerability: JSON via Path Traversal - CVE-2024-47170
• Path traversal in rollup-plugin-serve - CVE-2020-7684

You might also like:

Apache and Express Path Traversal plus Nginx Restriction Bypass Tests with SmartScanner

How to Secure your NodeJs Express Javascript Application - part 2

10 Secure Coding Best Practices to Follow in Every Project

Tags:

npm

socket.io-file