Skip to content
Threat Feed
Subscribe

Tag

Cve-2023-25345

1 brief RSS
high advisory

Path Traversal in @rhinostone/swig Template Engine

The @rhinostone/swig template engine (CVE-2023-25345) contains a path traversal vulnerability in its filesystem loader, allowing unauthenticated attackers to read arbitrary local files via include or extends tags.

@rhinostone/swig +4 directory-traversal arbitrary-file-read template-injection cve-2023-25345
1t 1c