Path Traversal in takeapeek · CVE-2018-16473 · GitHub Advisory Database · GitHub

Path Traversal in takeapeek

Moderate severity GitHub Reviewed Published Nov 6, 2018 to the GitHub Advisory Database • Updated Sep 7, 2023

Package

takeapeek (npm)

Affected versions

<= 0.2.2

Patched versions

None

Description

All versions of takeapeek are vulnerable to path traversal exposing files and directories.

Recommendation

As no fix is currently available for this vulnerability is it is our recommendation to use another static file server.

References

Published to the GitHub Advisory Database Nov 6, 2018

Reviewed Jun 16, 2020

Last updated Sep 7, 2023

Severity

Moderate

5.3

/ 10

CVSS base metrics

Attack vector

Network

Attack complexity

Low

Privileges required

None

User interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N