add descru

2020-08-25 23:23:46 +02:00 · 2020-08-25 23:23:46 +02:00 · 085f9c4a34
parent e767c37070
commit 085f9c4a34
1 changed files with 1 additions and 0 deletions
--- a/cves/CVE-2017-14849.yaml
+++ b/cves/CVE-2017-14849.yaml
@ -4,6 +4,7 @@ info:
  name: Node.js 8.5.0 >=< 8.6.0 Directory Traversal
  author: Random-Robbie
  severity: high
+  description: Node.js 8.5.0 before 8.6.0 allows remote attackers to access unintended files, because a change to ".." handling was incompatible with the pathname validation used by unspecified community modules.

 requests:
  - method: GET