Directory Traversal in evershop
Moderate severity
GitHub Reviewed
Published
Dec 8, 2023
to the GitHub Advisory Database
•
Updated Dec 13, 2023
Description
Published by the National Vulnerability Database
Dec 8, 2023
Published to the GitHub Advisory Database
Dec 8, 2023
Reviewed
Dec 13, 2023
Last updated
Dec 13, 2023
Directory Traversal vulnerability in EverShop NPM versions before v.1.0.0-rc.8 allows a remote attacker to obtain sensitive information via a crafted request to the mkdirSync function in the folderCreate/createFolder.js endpoint.
References