Description
Versions less than 0.1.4 of the static file server module fancy-server are vulnerable to directory traversal. An attacker can provide input such as `../` to read files outside of the served directory.
Remediation
References
https://nodesecurity.io/advisories/9
Related Vulnerabilities
CVE-2019-10343 Vulnerability in maven package io.jenkins:configuration-as-code
CVE-2021-21616 Vulnerability in maven package org.biouno:uno-choice
CVE-2022-29252 Vulnerability in maven package org.xwiki.platform:xwiki-platform-wiki-ui-mainwiki
CVE-2022-24785 Vulnerability in npm package moment
CVE-2021-39134 Vulnerability in npm package @npmcli/arborist