CVE-2018-16479

Path traversal vulnerability in http-live-simulator <1.0.7 causes unauthorized access to arbitrary files on disk by appending extra slashes after the URL.

Score

CVSS 3.0 7.5 High

Status

Modified - support@hackerone.com

Published

2019-02-01

Last modified

2024-08-05

Weaknesses

CWE-22

Affected products

• Http-live-simulator (Hackerone)
• Http-live-simulator (Http-live-simulator Project)

References

• https://hackerone.com/reports/411405