Path Traversal in Cabraviva Path-Sanitizer
CVE-2024-56198
path-sanitizer is a simple lightweight npm package for sanitizing paths to prevent Path Traversal. Prior to 3.1.0, the filters can be bypassed using .=%5c which results in a path traversal. This vulnerability is fixed in 3.1.0.
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.007 (51.2th percentile) — read the EPSS interpretation.
Affected products
- Cabraviva Path-sanitizer — versions < 3.1.0
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM)
- security-advisories@github.com (x_refsource_MISC)
- security-advisories@github.com (x_refsource_MISC)