| 标题 | RelaxedJS - Pathname Traversal |
|---|
| 描述 | The Relaxedjs tool(https://github.com/RelaxedJS/ReLaXed) does not sanitize the input file paths and thus while converting from pug to pdf this results in sensitive file read.Many tools use relaxedjs for pdf creation, this can cause remote attacker to read sensitive files from the target server. |
|---|
| 来源 | ⚠️ https://github.com/abhi-ingle/Vulnerability-Research/blob/main/RelaxedJS/File%20Read/file_read.mp4 |
|---|
| 用户 | abhi-ingle (UID 72986) |
|---|
| 提交 | 2024-09-19 13時13分 (2 年前) |
|---|
| 管理 | 2024-09-27 11時49分 (8 days later) |
|---|
| 状态 | 重复 |
|---|
| VulDB条目 | 278676 [RelaxedJS ReLaXed 直到 0.2.2 Pug to PDF Converter 跨网站脚本] |
|---|
| 积分 | 0 |
|---|