GHSA-3hjh-5hgx-f5whMediumCVSS 6.5

Path traversal vulnerability in glance

Published
February 13, 2023
Last Modified
February 24, 2023

🔗 CVE IDs covered (1)

CVE-2022-25937 →

📋 Description

Versions of the package glance before 3.0.9 are vulnerable to Directory Traversal that allows users to read files outside the public root directory. This is related to but distinct from the vulnerability reported in CVE-2018-3715.

🎯 Affected products1

  • npm/glance:< 3.0.9

🔗 References (5)