Description
zwserver is a weather web server. zwserver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
Remediation
References
https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/zwserver
https://nodesecurity.io/advisories/372
Related Vulnerabilities
CVE-2021-23388 Vulnerability in npm package forms
CVE-2017-11467 Vulnerability in maven package com.orientechnologies:orientdb-core
CVE-2023-45133 Vulnerability in npm package babel-traverse
CVE-2022-2063 Vulnerability in npm package nocodb
CVE-2010-3863 Vulnerability in maven package org.apache.shiro:shiro-all