CVE-2023-26126
CVSS V2 None
CVSS V3 None
Description
All versions of the package m.static are vulnerable to Directory Traversal due to improper input sanitization of the path being requested via the requestFile function.
Overview
- CVE ID
- CVE-2023-26126
- Assigner
- report@snyk.io
- Vulnerability Status
- Received
- Published Version
- 2023-05-10T05:15:08
- Last Modified Date
- 2023-05-10T05:15:08
References
| Reference URL | Reference Tags |
|---|---|
| https://gist.github.com/lirantal/dcb32c11ce87f5aafd2282b90b4dc998 | |
| https://security.snyk.io/vuln/SNYK-JS-MSTATIC-3244915 |
Sources
| Source Name | Source URL |
|---|---|
| NIST | https://nvd.nist.gov/vuln/detail/CVE-2023-26126 |
| MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-26126 |
History
| Created | Old Value | New Value | Data Type | Notes |
|---|---|---|---|---|
| 2023-05-10 06:00:33 | Added to TrackCVE |