Description
Directory traversal vulnerability in swig-templates thru 2.0.4 and swig thru 1.4.2, allows attackers to read arbitrary files via the include or extends tags.
Remediation
References
https://github.com/node-swig/swig-templates/issues/88
Related Vulnerabilities
CVE-2016-10735 Vulnerability in maven package org.webjars.bowergithub.twbs:bootstrap-sass
CVE-2016-10531 Vulnerability in maven package org.webjars.bower:marked
CVE-2020-5397 Vulnerability in maven package org.springframework:spring-webflux
CVE-2022-25860 Vulnerability in npm package simple-git
CVE-2020-11022 Vulnerability in maven package org.fujion.webjars:jquery