Description
serverwzl is a simple http server. serverwzl is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL.
Remediation
References
https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/serverwzl
https://nodesecurity.io/advisories/363
Related Vulnerabilities
CVE-2021-41165 Vulnerability in maven package org.webjars.bowergithub.ckeditor:ckeditor4
CVE-2013-3300 Vulnerability in maven package net.liftweb:lift-json_2.9.1
CVE-2017-16185 Vulnerability in npm package uekw1511server
CVE-2021-23335 Vulnerability in npm package is-user-valid
CVE-2014-3709 Vulnerability in maven package org.keycloak:keycloak-services