Description

serverhuwenhui is a simple http server. serverhuwenhui is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL.

Remediation

References

https://nodesecurity.io/advisories/366

https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/serverhuwenhui

Related Vulnerabilities

CVE-2016-10520 Vulnerability in npm package jadedown

CVE-2021-37694 Vulnerability in npm package @asyncapi/java-spring-cloud-stream-template

CVE-2021-4231 Vulnerability in npm package @angular/core

CVE-2023-30515 Vulnerability in maven package io.jenkins.plugins:thycotic-devops-secrets-vault

CVE-2021-3822 Vulnerability in npm package jsoneditor

Severity

High

Classification

CWE-22 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Exploit Third Party Advisory