Description
`hftp` is a static http or ftp server `hftp` is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
Remediation
References
https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/hftp
https://nodesecurity.io/advisories/384
Related Vulnerabilities
CVE-2017-16178 Vulnerability in npm package intsol-package
CVE-2023-28155 Vulnerability in maven package org.webjars:request
CVE-2022-25352 Vulnerability in npm package libnested
CVE-2020-13973 Vulnerability in maven package com.mikesamuel:json-sanitizer
CVE-2021-4040 Vulnerability in maven package org.apache.activemq:artemis-commons