Executive brief
angular-http-server is a lightweight HTTP server commonly used for serving Angular application files during development and testing. A path traversal vulnerability allows attackers to access files outside the intended serving directory, potentially exposing sensitive configuration files, source code, or other confidential data on the affected system.
Technical details
A path traversal vulnerability (CWE-22) in angular-http-server versions before 1.4.4 permits attackers to use specially crafted file path requests (such as "../../../" sequences) to access files and directories outside the web root directory. The vulnerability requires no authentication or user interaction and is exploitable via direct network requests. An attacker can read arbitrary files accessible to the process running the server. The issue was fixed in version 1.4.4, and users should upgrade immediately.
Affected products
- Simon H1000 angular-http-server before 1.4.4
Timeline
- 2019-05-31: disclosed
- 2019-05-31: patched: Fixed in version 1.4.4