Description

Directory traversal vulnerability in swig-templates thru 2.0.4 and swig thru 1.4.2, allows attackers to read arbitrary files via the include or extends tags.

Remediation

References

https://github.com/node-swig/swig-templates/issues/88

Related Vulnerabilities

CVE-2021-42550 Vulnerability in maven package ch.qos.logback:logback-core

CVE-2022-23223 Vulnerability in maven package org.apache.shenyu:shenyu-common

CVE-2018-1002202 Vulnerability in maven package net.lingala.zip4j:zip4j

CVE-2023-33546 Vulnerability in maven package org.codehaus.janino:janino-parent

CVE-2021-23406 Vulnerability in npm package pac-resolver

Severity

High

Classification

CWE-22 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Exploit Issue Tracking