GHSA-7x92-2j68-h32c Directory Traversal in featurebook
An attacker can read arbitrary files on the system via directory traversal in the featurebook library, requiring mitigation by avoiding production exposure.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is GHSA-7x92-2j68-h32c?
GHSA-7x92-2j68-h32c is a path traversal vulnerability in featurebook, published on 1 Sep 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Affected versions of featurebook resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system.
The featurebook package is not intended to be run in production code nor to be exposed to an untrusted network.
Proof of Concept
GET /../../../../../../../../../../etc/passwd HTTP/1.1
host:foo
Recommendation
No direct patch is currently available.
At this time, the best mitigation is to ensure that featurebook is not running in production or exposed to an untrusted network.
Which versions are affected by GHSA-7x92-2j68-h32c?
2 open source packages ship an affected version, including featurebook.
| Package | Affected | Fixed in |
|---|---|---|
featurebook npm | All versions | None |
featurebook npm | All versions | None |
How do I fix GHSA-7x92-2j68-h32c?
No fix has been published for GHSA-7x92-2j68-h32c yet. Limit exposure of the affected software until one is available.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is GHSA-7x92-2j68-h32c being exploited?
There is no known exploitation of GHSA-7x92-2j68-h32c in the wild and no public exploit code.