Description

All versions of package startserver are vulnerable to Directory Traversal due to missing sanitization.

Remediation

References

https://github.com/xudafeng/startserver/blob/bef0c4e4d21da42a40ce87cf25fd54ac8d8cb2d8/lib/index.js%23L71

https://snyk.io/vuln/SNYK-JS-STARTSERVER-1296388

Related Vulnerabilities

CVE-2022-21803 Vulnerability in npm package nconf

CVE-2020-7656 Vulnerability in npm package jquery

CVE-2020-7729 Vulnerability in npm package grunt

CVE-2021-21277 Vulnerability in npm package angular-expressions

CVE-2022-22965 Vulnerability in maven package org.springframework:spring-webmvc

Severity

High

Classification

CWE-22 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Broken Link Exploit Third Party Advisory