Description
Cross-site scripting (XSS) vulnerability in min-http-server (all versions) allows an attacker with access to the server file system to execute arbitrary JavaScript code in victim's browser.
Remediation
References
https://hackerone.com/reports/570568
Related Vulnerabilities
CVE-2010-2076 Vulnerability in maven package org.apache.cxf:cxf-bundle
CVE-2022-35142 Vulnerability in npm package raneto
CVE-2019-9827 Vulnerability in maven package io.hawt:hawtio-system
CVE-2006-2759 Vulnerability in maven package org.mortbay.jetty:jetty
CVE-2021-27582 Vulnerability in maven package org.mitre:openid-connect-server