GHSA-3hjh-5hgx-f5wh
Suggest an improvement- Source
- https://github.com/advisories/GHSA-3hjh-5hgx-f5wh
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/02/GHSA-3hjh-5hgx-f5wh/GHSA-3hjh-5hgx-f5wh.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/GHSA-3hjh-5hgx-f5wh
- Aliases
- Published
- 2023-02-13T06:30:59Z
- Modified
- 2023-11-01T04:58:24.769529Z
- Severity
-
- 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
- Summary
- Path traversal vulnerability in glance
- Details
-
Versions of the package glance before 3.0.9 are vulnerable to Directory Traversal that allows users to read files outside the public root directory. This is related to but distinct from the vulnerability reported in CVE-2018-3715.
- Database specific
{ "nvd_published_at": "2023-02-13T05:15:00Z", "github_reviewed_at": "2023-02-14T16:52:35Z", "severity": "MODERATE", "github_reviewed": true, "cwe_ids": [ "CWE-22" ] }- References
Affected packages
npm / glance
Package
- Name
- glance
- View open source insights on deps.dev
- Purl
- pkg:npm/glance