Description
serveryaozeyan is a simple HTTP server. serveryaozeyan is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL.
Remediation
References
https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/serveryaozeyan
https://nodesecurity.io/advisories/355
Related Vulnerabilities
CVE-2023-35150 Vulnerability in maven package org.xwiki.platform:xwiki-platform-invitation-ui
CVE-2022-1291 Vulnerability in maven package org.webjars.bower:tableexport.jquery.plugin
CVE-2020-35451 Vulnerability in maven package org.apache.oozie:oozie-tools
CVE-2023-44487 Vulnerability in maven package org.apache.tomcat.embed:tomcat-embed-core