CVE-2016-10528 Directory Traversal in restafary
MediumCVSS 4.9
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
restafary is a REpresentful State Transfer API for Creating, Reading, Using, Deleting files on a server from the web. Restafary before 1.6.1 is able to set up a root path, which should only allow it to run inside of that root path it specified.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| npm restafary(npm) | < 1.6.1 | 1.6.1 |
| restafary project restafary | < 1.6.1 | 1.6.1 |
| HackerOne restafary node module | = <1.6.1 | No fix listed |
References
- nvd.nist.gov third-party-advisory
- github.com
- www.npmjs.com
- nodesecurity.io exploit third-party-advisory