Description
desafio is a simple web server. desafio is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url, but is limited to accessing only .html files.
Remediation
References
https://nodesecurity.io/advisories/397
https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/desafio
Related Vulnerabilities
CVE-2022-25979 Vulnerability in npm package jsuites
CVE-2023-38905 Vulnerability in maven package org.jeecgframework.boot:jeecg-boot-base-core
CVE-2012-3451 Vulnerability in maven package org.apache.cxf:cxf-rt-core
CVE-2018-1002203 Vulnerability in maven package org.webjars.npm:unzipper
CVE-2019-10342 Vulnerability in maven package io.jenkins.docker:docker-plugin