Description
Path traversal in buttle module versions <= 0.2.0 allows to read any file in the server.
Remediation
References
https://hackerone.com/reports/358112
Related Vulnerabilities
CVE-2019-5427 Vulnerability in maven package c3p0:c3p0
CVE-2022-40955 Vulnerability in maven package org.apache.inlong:sort-connector-base
CVE-2020-7641 Vulnerability in npm package grunt-util-property
CVE-2022-34113 Vulnerability in maven package io.dataease:dataease-plugin-common
CVE-2022-29230 Vulnerability in npm package @shopify/hydrogen