Description

Bitty is a development web server tool that functions similar to `python -m SimpleHTTPServer`. Version 0.2.10 has a directory traversal vulnerability that is exploitable via the URL path in GET requests.

Remediation

References

https://nodesecurity.io/advisories/150

Related Vulnerabilities

CVE-2021-42575 Vulnerability in maven package com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer

CVE-2020-15152 Vulnerability in npm package ftp-srv

CVE-2020-10693 Vulnerability in maven package org.hibernate:hibernate-validator

CVE-2022-31183 Vulnerability in maven package co.fs2:fs2-io_sjs1_3

CVE-2020-14968 Vulnerability in maven package org.webjars.bowergithub.kjur:jsrsasign

Severity

Medium

Classification

CWE-22 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Tags

Third Party Advisory