CVE-2019-5484CWE-22

Bower before 1.8.8 has a path traversal vulnerability permitting file write in arbitrary locations via install command, which allows attackers to write…

published September 13, 2019

CVSS
—
EPSS
3%
Percentile
84.9
In the wild
Unconfirmed
What it is

Bower before 1.8.8 has a path traversal vulnerability permitting file write in arbitrary locations via install command, which allows attackers to write arbitrary files when a malicious package is extracted.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02566 · 84.9th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2019-09-13T17:30Z
EPSS history
Timeline
  • 13 SEP 17:30Z
    Bower before 1.8.8 has a path traversal vulnerability permitting file write in arbitrary locations via install command, which allows attackers to write…
    cvelistv5