Vulnerability Details : CVE-2019-5484
Bower before 1.8.8 has a path traversal vulnerability permitting file write in arbitrary locations via install command, which allows attackers to write arbitrary files when a malicious package is extracted.
Vulnerability category: Directory traversal
Exploit prediction scoring system (EPSS) score for CVE-2019-5484
Probability of exploitation activity in the next 30 days: 0.21%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 58 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2019-5484
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|
|
5.0
|
MEDIUM | AV:N/AC:L/Au:N/C:N/I:P/A:N |
10.0
|
2.9
|
[email protected] |
|
7.5
|
HIGH | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N |
3.9
|
3.6
|
[email protected] |
CWE ids for CVE-2019-5484
-
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.Assigned by:
- [email protected] (Primary)
- [email protected] (Secondary)
References for CVE-2019-5484
-
https://snyk.io/blog/severe-security-vulnerability-in-bowers-zip-archive-extraction
Exploit;Third Party Advisory
-
https://lists.apache.org/thread.html/rb5ac16fad337d1f3bb7079549f97d8166d0ef3082629417c39f12d63@%3Cnotifications.netbeans.apache.org%3E
Mailing List;Third Party Advisory
-
https://github.com/bower/bower/commit/45c6bfa86f6e57731b153baca9e0b41a1cc699e3
Patch
-
https://lists.apache.org/thread.html/r8ba4c628fba7181af58817d452119481adce4ba92e889c643e4c7dd3@%3Ccommits.netbeans.apache.org%3E
Mailing List;Third Party Advisory
-
https://hackerone.com/reports/473811
Exploit;Patch;Third Party Advisory
Products affected by CVE-2019-5484
- cpe:2.3:a:bower:bower:*:*:*:*:*:node.js:*:*