Vulnerability	Vulnerable Version
M Directory Traversal signalk-server is an An implementation of a Signal K server for boats. Affected versions of this package are vulnerable to Directory Traversal via improper validation in the `validateAppId` function. An attacker can access arbitrary files and directories outside the intended directory by supplying specially crafted input containing backslashes as directory separators on Windows systems. This may allow reading, writing, or listing sensitive files with the privileges of the authenticated user. How to fix Directory Traversal? Upgrade `signalk-server` to version 2.20.3 or higher.	<2.20.3

Directory Traversal

signalk-server is an An implementation of a Signal K server for boats.

Affected versions of this package are vulnerable to Directory Traversal via improper validation in the validateAppId function. An attacker can access arbitrary files and directories outside the intended directory by supplying specially crafted input containing backslashes as directory separators on Windows systems. This may allow reading, writing, or listing sensitive files with the privileges of the authenticated user.

How to fix Directory Traversal?

Upgrade signalk-server to version 2.20.3 or higher.

<2.20.3

Go back to all versions of this package