CVE-2015-5688 Directory Traversal in geddy
MediumCVSS 5.0
EPSS 9.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in lib/app/index.js in Geddy before 13.0.8 for Node.js allows remote attackers to read arbitrary files via a ..%2f (dot dot encoded slash) in the PATH_INFO to the default URI.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| npm geddy(npm) | < 13.0.8 | 13.0.8 |
| geddyjs geddy | = 13.0.7 | No fix listed |
References
- nvd.nist.gov third-party-advisory
- github.com exploit patch
- github.com patch
- github.com
- www.npmjs.com
- github.com patch
- github.com patch
- nodesecurity.io exploit