high7.5
CVE-2018-16479
Path Traversal in http-live-simulator
Impact
Versions of `http-live-simulator` prior to 1.0.7 are vulnerable to Path Traversal. Due to insufficient input sanitization, attackers can access server files by using relative paths. For example: `curl --path-as-is http://localhost:8080//../../../../etc/passwd`. ## Recommendation Upgrade to version 1.0.7
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | http-live-simulator | < 1.0.7 | 1.0.7 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Http-Live-Simulator Project | Http-Live-Simulator | through 1.0.6 |