Sensitive information in source code In org.apache.thrift:libthrift
Description
Apache Thrift Node.js static web server sandbox escape The Apache Thrift Node.js static web server in versions 0.9.2 through 0.11.0 have been determined to contain a security vulnerability in which a remote user has the ability to access files outside the set webservers docroot path.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 maven | 0.12.0 | ||
 debian 13 | 0.11.0-4 | ||
debian 12 | 0.11.0-4 | ||
debian 14 | 0.11.0-4 | ||
 npm | 0.12.0 |
Aliases
1. 2. 3. 4. 5. 6. 7. 8. 9.
References
1. 2. 3. 4. 5. 6. 7.