Vulnerability Description
path-sanitizer is a simple lightweight npm package for sanitizing paths to prevent Path Traversal. Prior to 3.1.0, the filters can be bypassed using .=%5c which results in a path traversal. This vulnerability is fixed in 3.1.0.
Related Weaknesses (CWE)
References
- https://github.com/cabraviva/path-sanitizer/commit/b6d2319eac910dffdfacc8460f5b5
- https://github.com/cabraviva/path-sanitizer/security/advisories/GHSA-94p5-r7cc-3
- https://www.loom.com/share/b766ece5193842848ce7562fcd559256?sid=fd826eb6-0eee-46
FAQ
What is CVE-2024-56198?
CVE-2024-56198 is a documented vulnerability. path-sanitizer is a simple lightweight npm package for sanitizing paths to prevent Path Traversal. Prior to 3.1.0, the filters can be bypassed using .=%5c which results in a path traversal. This vulne...
How severe is CVE-2024-56198?
CVSS scoring is not yet available for CVE-2024-56198. Check NVD for updates.
Is there a patch for CVE-2024-56198?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.