Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

CVE-2022-0436 @ Npm-grunt-1.0.3 #184

Open
RobertMickleCx opened this issue Mar 7, 2023 · 0 comments
Open

CVE-2022-0436 @ Npm-grunt-1.0.3 #184

RobertMickleCx opened this issue Mar 7, 2023 · 0 comments

Comments

@RobertMickleCx
Copy link
Owner

RobertMickleCx commented Mar 7, 2023

Vulnerable Package issue exists @ Npm-grunt-1.0.3 in branch master

Path Traversal in GitHub repository gruntjs/grunt prior to 1.5.2.

Namespace: RobertMickleCx
Repository: NodeGoat
Repository Url: https://github.com/RobertMickleCx/NodeGoat
CxAST-Project: RobertMickleCx/NodeGoat
CxAST platform scan: 4cad0b9d-cbe1-4acd-bb82-244764df9dbd
Branch: master
Application: NodeGoat
Severity: MEDIUM
State: NOT_IGNORED
Status: RECURRENT
CWE: CWE-22


Additional Info
Attack vector: LOCAL
Attack complexity: LOW
Confidentiality impact: HIGH
Availability impact: NONE
Remediation Upgrade Recommendation: 1.5.3


References
Advisory
Disclosure
Pull request
Commit
Release Note
Commit
Pull request

# for free to join this conversation on GitHub. Already have an account? # to comment
Projects
None yet
Development

No branches or pull requests

1 participant