Description
serverwg is a simple http server. serverwg is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL.
Remediation
References
https://nodesecurity.io/advisories/364
https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/serverwg
Related Vulnerabilities
CVE-2022-23596 Vulnerability in maven package com.github.junrar:junrar
CVE-2020-15250 Vulnerability in maven package junit:junit
CVE-2020-7781 Vulnerability in npm package connection-tester
CVE-2022-45206 Vulnerability in maven package org.jeecgframework.boot:jeecg-boot-base-core
CVE-2022-31175 Vulnerability in npm package @ckeditor/ckeditor5-html-embed