high7.5
CVE-2023-39141
webui-aria2 Path Traversal vulnerability
Impact
webui-aria2 commit 4fe2e was discovered to contain a path traversal vulnerability.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | webui-aria2 | <= 1.0.1 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ziahamza | Webui-Aria2 | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://gist.github.com/JafarAkhondali/528fe6c548b78f454911fb866b23f66e
- https://github.com/ziahamza/webui-aria2/blob/109903f0e2774cf948698cd95a01f77f33d7dd2c/node-server.js#L10
- https://github.com/advisories/GHSA-crv8-r5wq-gv2w
- https://nvd.nist.gov/vuln/detail/CVE-2023-39141