| 제목 | RelaxedJS - Pathname Traversal |
|---|
| 설명 | The Relaxedjs tool(https://github.com/RelaxedJS/ReLaXed) does not sanitize the input file paths and thus while converting from pug to pdf this results in sensitive file read.Many tools use relaxedjs for pdf creation, this can cause remote attacker to read sensitive files from the target server. |
|---|
| 원천 | ⚠️ https://github.com/abhi-ingle/Vulnerability-Research/blob/main/RelaxedJS/File%20Read/file_read.mp4 |
|---|
| 사용자 | abhi-ingle (UID 72986) |
|---|
| 제출 | 2024. 09. 19. PM 01:13 (2 연령 ago) |
|---|
| 모더레이션 | 2024. 09. 27. AM 11:49 (8 days later) |
|---|
| 상태 | 중복 |
|---|
| VulDB 항목 | 278676 [RelaxedJS ReLaXed 까지 0.2.2 Pug to PDF Converter 크로스 사이트 스크립팅] |
|---|
| 포인트들 | 0 |
|---|