TI-2019-03847 CVE-2019-5438 · GHSA-6fmm-47qc-p4m4
Path traversal using symlink in npm harp module versions <= 0.29.0.
Priority LOW 27
Path traversal using symlink in npm harp module versions <= 0.29.0.
Harpjs
Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Harpjs records in CISA KEVNo Harpjs vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
2 records in Harp · all components
TI-2019-03846 CVE-2019-5437 · GHSA-46hv-7769-j7rx
Information disclosure in harp
Priority LOW 27
Information exposure through the directory listing in npm's harp module allows to access files that are supposed to be ignored according to the harp server rules.Vulnerable versions are <= 0.29.0 and no fix was applied t…