Description
node-srv node module suffers from a Path Traversal vulnerability due to lack of validation of url, which allows a malicious user to read content of any file with known path.
Remediation
References
https://hackerone.com/reports/309124
Related Vulnerabilities
CVE-2023-26115 Vulnerability in npm package word-wrap
CVE-2023-24187 Vulnerability in maven package com.bstek.ureport:ureport2-core
CVE-2020-13110 Vulnerability in npm package kerberos
CVE-2017-16881 Vulnerability in maven package org.b3log:symphony
CVE-2023-34840 Vulnerability in npm package angular-ui-notification