Description
tiny-http is a simple http server. tiny-http is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
Remediation
References
https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/tiny-http
https://nodesecurity.io/advisories/342
Related Vulnerabilities
CVE-2023-34035 Vulnerability in maven package org.springframework.security:spring-security-config
CVE-2020-8158 Vulnerability in npm package typeorm
CVE-2022-1291 Vulnerability in maven package org.webjars.bower:tableexport.jquery.plugin
CVE-2011-0013 Vulnerability in maven package org.apache.tomcat:catalina
CVE-2016-10735 Vulnerability in maven package org.wildfly.swarm:bootstrap