Critical AdonisJS Vulnerability Allows Remote Attackers to Write Files on Servers

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical AdonisJS Vulnerability Exposes Servers to Remote File Write Attacks A critical path traversal vulnerability in AdonisJS's bodyparser module has been identified, allowing remote attackers to write files on affected servers. This vulnerability impacts applications built on the AdonisJS framework, which is popular among developers using TypeScript. The exploit for this vulnerability has been released, increasing the urgency for affected users to secure their applications. 3 sources 52