Description

serveryztyzt is a simple http server. serveryztyzt is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL.

Remediation

References

https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/serveryztyzt

https://nodesecurity.io/advisories/354

Related Vulnerabilities

CVE-2020-5243 Vulnerability in npm package uap-core

CVE-2022-40664 Vulnerability in maven package org.apache.shiro:shiro-core

CVE-2021-41189 Vulnerability in maven package org.dspace:dspace-api

CVE-2019-10806 Vulnerability in npm package vega-util

CVE-2021-32573 Vulnerability in npm package express-cart

Severity

High

Classification

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Exploit Third Party Advisory CWE-22