CVE-2019-8903
1 advisory.
npm/total.js CVE-2019-8903: high 7.5
Path Traversal in total.js
Action: Upgrade total.js to 3.2.3 or later.
npm i total.js@3.2.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.2.3 | - |
Fixed versions
| 3.2.3 |
Sources
- osv: GHSA-3q32-j57w-q4w7
- https://nvd.nist.gov/vuln/detail/CVE-2019-8903
- https://github.com/totaljs/framework/commit/c37cafbf3e379a98db71c1125533d1e8d5b5aef7
- https://github.com/totaljs/framework/commit/de16238d13848149f5d1dae51f54e397a525932b
- https://blog.certimetergroup.com/it/articolo/security/total.js-directory-traversal-cve-2019-8903
- https://github.com/advisories/GHSA-3q32-j57w-q4w7
- https://github.com/totaljs/framework
- https://www.npmjs.com/advisories/1026
CVE-2019-8903 · published · modified · JSON