Description

A Path traversal exists in http_server which allows an attacker to read arbitrary system files.

Remediation

References

https://hackerone.com/reports/692262

Related Vulnerabilities

CVE-2023-51075 Vulnerability in maven package cn.hutool:hutool-core

CVE-2016-6347 Vulnerability in maven package org.jboss.resteasy:resteasy-jaxrs

CVE-2017-16018 Vulnerability in npm package restify

CVE-2022-31129 Vulnerability in npm package moment

CVE-2022-39299 Vulnerability in npm package node-saml

Severity

High

Classification

CWE-22 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Issue Tracking Third Party Advisory