CVEs-PoC/2020/CVE-2020-28469.md

CVE-2020-28469

Description

This affects the package glob-parent before 5.1.2. The enclosure regex used to check for strings ending in enclosure containing path separator.

POC

Reference

• https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBES128-1059093
• https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1059092
• https://snyk.io/vuln/SNYK-JS-GLOBPARENT-1016905
• https://www.oracle.com/security-alerts/cpujan2022.html

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/BlackChaose/my_snippets
• https://github.com/MaySoMusician/geidai-ikoi
• https://github.com/aminekun90/mdns_listener_advanced
• https://github.com/anthonykirby/lora-packet
• https://github.com/engn33r/awesome-redos-security
• https://github.com/git-kick/ioBroker.e3dc-rscp
• https://github.com/seal-community/patches
• https://github.com/yetingli/PoCs