Description
ritp is a static web server. ritp is vulnerable to a directory traversal issue whereby an attacker can gain access to the file system by placing ../ in the URL. Access is restricted to files with a file extension, so files such as /etc/passwd are not accessible.
Remediation
References
https://nodesecurity.io/advisories/432
https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/ritp
Related Vulnerabilities
CVE-2022-27202 Vulnerability in maven package org.jenkins-ci.plugins:extended-choice-parameter
CVE-2016-10735 Vulnerability in maven package org.ow2.jonas:bootstrap
CVE-2018-8108 Vulnerability in npm package bui
CVE-2020-28052 Vulnerability in maven package org.bouncycastle:bcprov-debug-jdk15on
CVE-2020-36184 Vulnerability in maven package com.fasterxml.jackson.core:jackson-databind