CVE-2020-36629

A vulnerability classified as critical was found in SimbCo httpster. This vulnerability affects the function fs.realpathSync of the file src/server.coffee. The manipulation leads to path traversal. The exploit has been disclosed to the public and may be used. The name of the patch is d3055b3e30b40b65d30c5a06d6e053dffa7f35d0. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-216748.

• CWE-22

• https://github.com/SimbCo/httpster/commit/d3055b3e30b40b65d30c5a06d6e053dffa7f35d0Patch, Third Party Advisory
• https://github.com/SimbCo/httpster/pull/36Exploit, Patch, Third Party Advisory
• https://vuldb.com/?id.216748Third Party Advisory
• https://github.com/SimbCo/httpster/commit/d3055b3e30b40b65d30c5a06d6e053dffa7f35d0Patch, Third Party Advisory
• https://github.com/SimbCo/httpster/pull/36Exploit, Patch, Third Party Advisory
• https://vuldb.com/?id.216748Third Party Advisory

Published

Dec 25, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-36623A vulnerability was found in Pengu. It has been declared as …6.5
• CVE-2020-36624A vulnerability was found in ahorner text-helpers up to 1.0.…6.1
• CVE-2020-36625A vulnerability was found in destiny.gg chat. It has been ra…8.8
• CVE-2020-36626A vulnerability classified as critical has been found in Mod…6.1
• CVE-2020-36627A vulnerability was found in Macaron i18n. It has been decla…6.1
• CVE-2020-36628A vulnerability classified as critical has been found in Cal…9.8
• CVE-2020-3663Buffer over-write may occur during fetching track decoder sp…9.8
• CVE-2020-36630A vulnerability was found in FreePBX cdr 14.0. It has been c…9.8
• CVE-2020-36631A vulnerability was found in barronwaffles dwc_network_serve…9.8
• CVE-2020-36632A vulnerability, which was classified as critical, was found…9.8
• CVE-2020-36633A vulnerability was found in moodle-block_sitenews 1.0. It h…6.5
• CVE-2020-36634A vulnerability classified as problematic has been found in …5.4