VulnerableCode Advisory Details - npm/badjs-sourcemap-server/GMS-2017-127

Staging Environment: Content and features may be unstable or change without notice.

Advisory details: gitlab / npm/badjs-sourcemap-server/GMS-2017-127

Essentials
Severities (0)
References (1)
Exploits (0)
EPSS
Severity details (0)
Patches: (0)

Advisory ID	gitlab/npm/badjs-sourcemap-server/GMS-2017-127
Aliases	GMS-2017-127
Summary	Directory Traversal badjs-sourcemap-server is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL.
Status	Published
Exploitability	0.5
Weighted Severity	0.0
Risk
Affected and Fixed Packages	Package Details
Introduced and Fixed Package Commit Patches	Package Commit Patches Details

Weaknesses (2)

CWE-1035	OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-937	OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities

System	Score	Found at
There are no known severity scores.

Reference id	Reference type	URL
		https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/badjs-sourcemap-server

No exploits are available.

No EPSS data available for this advisory.

Patch URL
There are no known patches.

There are no known vectors.

There are no SSVC decisions available.