The probability is the direct output of the EPSS model, and conveys an overall sense of the threat of exploitation in the wild. The percentile measures the EPSS probability relative to all known EPSS scores. Note: This data is updated daily, relying on the latest available EPSS model version. Check out the EPSS documentation for more details.
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applicationsThere is no fixed version for github.com/TykTechnologies/tyk/gateway
.
github.com/TykTechnologies/tyk/gateway is a Tyk Gateway API
Affected versions of this package are vulnerable to Directory Traversal via the handleAddOrUpdateApi
function.
This function is able to delete arbitrary JSON files on the disk where Tyk
is running via the management API. The APIID
is provided by the user and this value is then used to create a file on disk. If there is a file found with the same name then it will be deleted and then re-created with the contents of the API creation request.