Description

A path traversal vulnerability in <= v0.9.7 of statichttpserver npm module allows attackers to list files in arbitrary folders.

Remediation

References

https://hackerone.com/reports/570035

Related Vulnerabilities

CVE-2016-10520 Vulnerability in npm package jadedown

CVE-2023-38889 Vulnerability in maven package org.alluxio:alluxio-parent

CVE-2020-7722 Vulnerability in npm package nodee-utils

CVE-2023-37908 Vulnerability in maven package org.xwiki.rendering:xwiki-rendering-xml

CVE-2021-27292 Vulnerability in npm package ua-parser-js

Severity

Medium

Classification

CWE-22 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Tags

Exploit Issue Tracking Third Party Advisory