Description
Path traversal using symlink in npm harp module versions <= 0.29.0.
Remediation
References
https://hackerone.com/reports/530289
Related Vulnerabilities
CVE-2022-25927 Vulnerability in npm package ua-parser-js
CVE-2019-20503 Vulnerability in maven package org.webjars.npm:electron
CVE-2021-21316 Vulnerability in npm package less-openui5
CVE-2022-0722 Vulnerability in npm package parse-url
CVE-2022-34115 Vulnerability in maven package io.dataease:dataease-plugin-common