Vulnerability Details : CVE-2019-5484
Potential exploit
Bower before 1.8.8 has a path traversal vulnerability permitting file write in arbitrary locations via install command, which allows attackers to write arbitrary files when a malicious package is extracted.
Vulnerability category: Directory traversal
Products affected by CVE-2019-5484
- cpe:2.3:a:bower:bower:*:*:*:*:*:node.js:*:*
Exploit prediction scoring system (EPSS) score for CVE-2019-5484
0.42%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 74 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2019-5484
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
5.0
|
MEDIUM | AV:N/AC:L/Au:N/C:N/I:P/A:N |
10.0
|
2.9
|
NIST | |
7.5
|
HIGH | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N |
3.9
|
3.6
|
NIST |
CWE ids for CVE-2019-5484
-
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.Assigned by:
- nvd@nist.gov (Primary)
- support@hackerone.com (Secondary)
References for CVE-2019-5484
-
https://snyk.io/blog/severe-security-vulnerability-in-bowers-zip-archive-extraction
Severe Security Vulnerability in Bower’s Zip Archive Extraction | SnykExploit;Third Party Advisory
-
https://lists.apache.org/thread.html/rb5ac16fad337d1f3bb7079549f97d8166d0ef3082629417c39f12d63@%3Cnotifications.netbeans.apache.org%3E
[GitHub] [netbeans] BradWalker opened a new pull request #2110: [NETBEANS-4280] - cleanup potential security breaches - Pony MailMailing List;Third Party Advisory
-
https://github.com/bower/bower/commit/45c6bfa86f6e57731b153baca9e0b41a1cc699e3
Fix .tar.gz extract vulnerability · bower/bower@45c6bfa · GitHubPatch
-
https://lists.apache.org/thread.html/r8ba4c628fba7181af58817d452119481adce4ba92e889c643e4c7dd3@%3Ccommits.netbeans.apache.org%3E
[jira] [Created] (NETBEANS-4280) cleanup potential security breaches - Pony MailMailing List;Third Party Advisory
-
https://hackerone.com/reports/473811
#473811 [bower] Arbitrary File Write through improper validation of symlinks while package extractionExploit;Patch;Third Party Advisory
Jump to