CVE-2020-15779 describes a Path Traversal vulnerability in the socket.io-file package up to version 2.0.31 for Node.js, allowing attackers to manipulate file paths during upload operations. This high-severity vulnerability (CVSS 7.5) can lead to unauthorized file modification or creation due to improper handling of directory traversal sequences in file names. Despite its severity, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion, suggesting a low current threat landscape.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 2.0.31CPE matchmatch criteria | cpe:2.3:a:socket.io-file_project:socket.io-file:*:*:*:*:*:node.js:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.