CVE-2017-16107: Directory Traversal Vulnerability in pooledwebsocket
Summary
CVE-2017-16107: Directory traversal in pooledwebsocket. Affects pooledwebsocket versions < 0.0.19. Fixed in 0.0.19. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
pooledwebsocket is an npm package that provides a WebSocket pool for reusing connections. It allows developers to efficiently manage WebSocket connections in their applications. However, versions of pooledwebsocket prior to 0.0.19 are vulnerable to a directory traversal attack. This vulnerability allows an attacker to access files outside of the intended directory root, potentially leading to the disclosure of sensitive information.
Vulnerability Detail
The vulnerability in pooledwebsocket arises from the package's resolution of relative file paths. By manipulating the file path in a WebSocket request, an attacker can traverse directories and access files outside of the intended directory root. For example, an attacker could send a GET request with a crafted file path like GET /../../../etc/passwd HTTP/1.1, which would retrieve the /etc/passwd file on the vulnerable system. This could result in the exposure of sensitive files containing user credentials or other confidential information.
How To Fix
Minimum fixed version
0.0.19
This is the first release that contains the fix.
npm install pooledwebsocket@0.0.19Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. However, applying the recommended fix by updating to the latest version of the package should address the issue.
Conclusion
The directory traversal vulnerability in pooledwebsocket versions prior to 0.0.19 can allow an attacker to access files outside of the intended directory root, potentially leading to the exposure of sensitive information. It is crucial to update to the latest version of the package to mitigate this vulnerability. For more information and support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for pooledwebsocket →
FAQ
The vulnerability allows an attacker to access files outside of the intended directory root, potentially leading to the disclosure of sensitive information.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability. Vulert monitors and alerts in real-time for open-source vulnerabilities, using just the package-lock.json file.
While specific exploits for this vulnerability may exist, they have not been mentioned in the provided information. However, it is crucial to address the vulnerability by updating to the latest version of the package to prevent any potential exploitation.
For more information about this vulnerability, you can refer to the GitHub Security Advisory database at https://github.com/github/advisory-database/advisories/GHSA-cfxm-4p54-5w7h.
For further support on vulnerability remediation, you can reach out to info@devnack.com.
