Description
Cross-site scripting (XSS) vulnerability in min-http-server (all versions) allows an attacker with access to the server file system to execute arbitrary JavaScript code in victim's browser.
Remediation
References
https://hackerone.com/reports/570568
Related Vulnerabilities
CVE-2021-21119 Vulnerability in maven package org.webjars.npm:electron
CVE-2020-14968 Vulnerability in maven package org.webjars.bower:jsrsasign
CVE-2022-31129 Vulnerability in maven package org.webjars.bower:moment
CVE-2022-31170 Vulnerability in maven package org.webjars.npm:openzeppelin__contracts-upgradeable
CVE-2018-5673 Vulnerability in maven package org.apache.geronimo.plugins:dojo