Description

shit-server is a file server. shit-server is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.

Remediation

References

https://nodesecurity.io/advisories/430

https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/shit-server

Related Vulnerabilities

CVE-2023-30465 Vulnerability in maven package org.apache.inlong:manager-pojo

CVE-2017-16093 Vulnerability in npm package cyber-js

CVE-2020-10689 Vulnerability in maven package org.eclipse.che.infrastructure:infrastructure-kubernetes

CVE-2023-29234 Vulnerability in maven package org.apache.dubbo:dubbo

CVE-2019-19771 Vulnerability in npm package bitcionjs

Severity

High

Classification

CWE-22 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Third Party Advisory Exploit