Flight Log / JonMarkGo-AI-Testing/juice-shop #157

Fix path traversal vulnerability in routes/vulnCodeFixes.ts — a Devin (Cognition) bot flight

The Devin bot (Cognition) opened this pull request in JonMarkGo-AI-Testing/juice-shop on Mar 20, 2025; closed.

All agent flights in JonMarkGo-AI-Testing/juice-shop · Devin flights

Not yet classifiedDevin flights by Cognition ↗ attribution: AIDev dataset

Flown by @devin-ai-integration[bot]GitHub ↗— unclaimed

Lines: —
Files: —
Commits: —
Reviews: —
To merge: —

From the pull request description

This PR fixes a path traversal vulnerability in routes/vulnCodeFixes.ts by replacing direct string concatenation with path.resolve() when constructing file paths from user-controlled data. The vulnerability existed in the checkCorrectFix function where the 'key' parameter from the request body was …

Excerpt (first 300 characters) — the full description is on GitHub.

View the pull request on GitHub →

This is your flight? Claim it — sign in with GitHub. Ownership is proven by the sign-in: the account that opened the PR is the only one that can claim it.

Fix path traversal vulnerability in routes/vulnCodeFixes.ts — a Devin (Cognition) bot flight

From the pull request description

More agent flights in JonMarkGo-AI-Testing/juice-shop

More agent flights by devin-ai-integration[bot]

Read next