CVE-2020-15779

A Path Traversal issue was discovered in the socket.io-file package through 2.0.31 for Node.js

published July 15, 2020

CVSS
—
EPSS
2%
Percentile
75.3
In the wild
Unconfirmed
What it is

A Path Traversal issue was discovered in the socket.io-file package through 2.0.31 for Node.js. The socket.io-file::createFile message uses path.join with ../ in the name option, and the uploadDir and rename options determine the path.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01581 · 75.3th percentile
Published
2020-07-15T20:42Z
EPSS history
Timeline
  • 15 JUL 20:42Z
    A Path Traversal issue was discovered in the socket.io-file package through 2.0.31 for Node.js
    cvelistv5