Description
ewgaddis.lab6 is a file server. ewgaddis.lab6 is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
Remediation
References
https://nodesecurity.io/advisories/465
https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/ewgaddis.lab6
Related Vulnerabilities
CVE-2019-19771 Vulnerability in npm package crpyto-js
CVE-2022-0087 Vulnerability in npm package @keystone-6/auth
CVE-2017-11555 Vulnerability in npm package node-sass
CVE-2021-21353 Vulnerability in maven package org.webjars.npm:pug
CVE-2023-31826 Vulnerability in maven package org.skyscreamer:nevado-jms