Description

All versions of package startserver are vulnerable to Directory Traversal due to missing sanitization.

Remediation

References

https://github.com/xudafeng/startserver/blob/bef0c4e4d21da42a40ce87cf25fd54ac8d8cb2d8/lib/index.js%23L71

https://snyk.io/vuln/SNYK-JS-STARTSERVER-1296388

Related Vulnerabilities

CVE-2023-26476 Vulnerability in maven package org.xwiki.platform:xwiki-platform-livetable-ui

CVE-2018-6356 Vulnerability in maven package org.jenkins-ci.main:jenkins-core

CVE-2022-23621 Vulnerability in maven package org.xwiki.platform:xwiki-platform-oldcore

CVE-2020-8214 Vulnerability in npm package servey

CVE-2023-37948 Vulnerability in maven package org.jenkins-ci.plugins:oracle-cloud-infrastructure-compute

Severity

High

Classification

CWE-22 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Broken Link Exploit Third Party Advisory