Description
crud-file-server node module before 0.8.0 suffers from a Cross-Site Scripting vulnerability to a lack of validation of file names.
Remediation
References
https://hackerone.com/reports/311101
https://github.com/omphalos/crud-file-server/commit/4155bfe068bf211b49a0b3ffd06e78cbaf1b40fa
Related Vulnerabilities
CVE-2023-36665 Vulnerability in maven package org.webjars.npm:github-com-protobufjs-protobuf-js
CVE-2020-14966 Vulnerability in maven package org.webjars.bower:jsrsasign
CVE-2018-9207 Vulnerability in maven package org.webjars.bower:jquery-file-upload
CVE-2022-31103 Vulnerability in npm package lettersanitizer
CVE-2022-41255 Vulnerability in maven package org.jenkins-ci.plugins:cons3rt