Description

This affects the package glob-parent before 5.1.2. The enclosure regex used to check for strings ending in enclosure containing path separator.

Related CPE's

a

gulpjs

glob-parent

*

*

*

*

*

node.js

Vulnerable

a

oracle

communications_cloud_native_core_policy

1.14.0

Vulnerable

References

https://github.com/gulpjs/glob-parent/blob/6ce8d11f2f1ed8e80a9526b1dc8cf3aa71f43474/index.js%23L9

Broken Link

https://github.com/gulpjs/glob-parent/pull/36

PatchThird Party Advisory

https://github.com/gulpjs/glob-parent/releases/tag/v5.1.2

Release NotesThird Party Advisory

https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBES128-1059093

ExploitThird Party Advisory

https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1059092

ExploitThird Party Advisory

https://snyk.io/vuln/SNYK-JS-GLOBPARENT-1016905

ExploitThird Party Advisory

https://www.oracle.com/security-alerts/cpujan2022.html

PatchThird Party Advisory

https://github.com/gulpjs/glob-parent/blob/6ce8d11f2f1ed8e80a9526b1dc8cf3aa71f43474/index.js%23L9

Broken Link

https://github.com/gulpjs/glob-parent/pull/36

PatchThird Party Advisory

https://github.com/gulpjs/glob-parent/releases/tag/v5.1.2

Release NotesThird Party Advisory

https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBES128-1059093

ExploitThird Party Advisory

https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1059092

ExploitThird Party Advisory

https://snyk.io/vuln/SNYK-JS-GLOBPARENT-1016905

ExploitThird Party Advisory

https://www.oracle.com/security-alerts/cpujan2022.html

PatchThird Party Advisory

Weaknesses

[email protected]

Primary
CWE-400

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

5.3 · Medium

Information

Source identifier

[email protected]

Vulnerability status

Modified

Published

2021-06-03T14:15:07.507Z

4 years ago

Last modified

2024-11-21T04:22:51.557Z

1 year ago