Description
Cross-site scripting (XSS) vulnerability in min-http-server (all versions) allows an attacker with access to the server file system to execute arbitrary JavaScript code in victim's browser.
Remediation
References
https://hackerone.com/reports/570568
Related Vulnerabilities
CVE-2022-1233 Vulnerability in maven package org.webjars.npm:urijs
CVE-2023-36106 Vulnerability in maven package tech.powerjob:powerjob
CVE-2020-7690 Vulnerability in maven package org.webjars:jspdf
CVE-2021-23341 Vulnerability in maven package org.webjars:prismjs
CVE-2012-0391 Vulnerability in maven package com.opensymphony:xwork-core