| Название | RelaxedJS - Pathname Traversal |
|---|
| Описание | The Relaxedjs tool(https://github.com/RelaxedJS/ReLaXed) does not sanitize the input file paths and thus while converting from pug to pdf this results in sensitive file read.Many tools use relaxedjs for pdf creation, this can cause remote attacker to read sensitive files from the target server. |
|---|
| Источник | ⚠️ https://github.com/abhi-ingle/Vulnerability-Research/blob/main/RelaxedJS/File%20Read/file_read.mp4 |
|---|
| Пользователь | abhi-ingle (UID 72986) |
|---|
| Представление | 19.09.2024 13:13 (2 лет назад) |
|---|
| Модерация | 27.09.2024 11:49 (8 days later) |
|---|
| Статус | Дубликат |
|---|
| Запись VulDB | 278676 [RelaxedJS ReLaXed до 0.2.2 Pug to PDF Converter межсайтовый скриптинг] |
|---|
| Баллы | 0 |
|---|