Security Advisory
CVE-2020-15779
7.5
HIGH
Vulnerability Description
A Path Traversal issue was discovered in the socket.io-file package through 2.0.31 for Node.js. The socket.io-file::createFile message uses path.join with ../ in the name option, and the uploadDir and rename options determine the path.
Published Date
July 15, 2020
Official Source
NIST NVD Advisory