search

adapt-security / adapt-authoring

A server-based user interface for authoring eLearning courses using the Adapt framework.
http://adaptlearning.org
10 stars 5 forks source link

Need to sanitise path value before performing fs read #545

Closed taylortom closed 1 year ago

taylortom commented 1 year ago

REPORTED BY SNYK

https://github.com/adapt-security/adapt-authoring-adaptframework/blob/master/lib/AdaptFrameworkUtils.js#L196-L199

See: https://owasp.org/www-community/attacks/Path_Traversal

taylortom commented 1 year ago

Moved to https://github.com/adapt-security/adapt-authoring/issues/584