Description
Bitty is a development web server tool that functions similar to `python -m SimpleHTTPServer`. Version 0.2.10 has a directory traversal vulnerability that is exploitable via the URL path in GET requests.
Remediation
References
https://nodesecurity.io/advisories/150
Related Vulnerabilities
CVE-2018-1000136 Vulnerability in npm package electron
CVE-2016-10541 Vulnerability in maven package org.webjars.npm:shell-quote
CVE-2020-26238 Vulnerability in maven package com.cronutils:cron-utils
CVE-2022-28135 Vulnerability in maven package org.jvnet.hudson.plugins:instant-messaging
CVE-2021-23899 Vulnerability in maven package com.mikesamuel:json-sanitizer