| عنوان | RelaxedJS - Pathname Traversal |
|---|
| الوصف | The Relaxedjs tool(https://github.com/RelaxedJS/ReLaXed) does not sanitize the input file paths and thus while converting from pug to pdf this results in sensitive file read.Many tools use relaxedjs for pdf creation, this can cause remote attacker to read sensitive files from the target server. |
|---|
| المصدر | ⚠️ https://github.com/abhi-ingle/Vulnerability-Research/blob/main/RelaxedJS/File%20Read/file_read.mp4 |
|---|
| المستخدم | abhi-ingle (UID 72986) |
|---|
| ارسال | 19/09/2024 01:13 PM (2 سنوات منذ) |
|---|
| الاعتدال | 27/09/2024 11:49 AM (8 days later) |
|---|
| الحالة | مكرر |
|---|
| إدخال VulDB | 278676 [RelaxedJS ReLaXed حتى 0.2.2 Pug to PDF Converter البرمجة عبر المواقع] |
|---|
| النقاط | 0 |
|---|