CVE-2022-24718: Path Traversal in ssr-pages
ssr-pages is an HTML page builder for the purpose of server-side rendering (SSR). In versions prior to 0.1.4, a path traversal issue can occur when providing untrusted input to the svg property as an argument to the build(MessagePageOptions) function. While there is no known workaround at this time, there is a patch in version 0.1.4.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2022-24718?
The severity of CVE-2022-24718 is not explicitly rated but it involves a path traversal vulnerability which can lead to unauthorized file access.
How do I fix CVE-2022-24718?
To fix CVE-2022-24718, upgrade to version 0.1.4 or later of the ssr-pages package.
What is the impact of CVE-2022-24718?
CVE-2022-24718 can allow attackers to exploit the path traversal vulnerability to access restricted files on the server.
What software is affected by CVE-2022-24718?
CVE-2022-24718 affects the ssr-pages package versions prior to 0.1.4.
Who is the vendor of the affected software for CVE-2022-24718?
The affected software, ssr-pages, is provided by Finastra.