CVE-2024-43035
1 advisory.
npm/@fonoster/voice CVE-2024-43035: medium 5.8
Fonoster is vulnerable to directory traversal
Action: Upgrade @fonoster/voice to 0.6.1 or later.
npm i @fonoster/voice@0.6.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.5.5 | 0.6.1 | - |
Fixed versions
| 0.6.1 |
Sources
- osv: GHSA-9fv2-c7v6-p45w
- https://nvd.nist.gov/vuln/detail/CVE-2024-43035
- https://github.com/fonoster/fonoster
- https://github.com/fonoster/fonoster/blob/4a1438d9dedeaf7b2a5b6a50d5e233f994e2b2cf/mods/voice/src/utils.ts#L66-L70
- https://zeropath.com/blog/fonoster-voiceserver-lfi-vulnerability
CVE-2024-43035 · published · modified · JSON