Description
serverabc is a static file server. serverabc is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
Remediation
References
https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/serverabc
https://nodesecurity.io/advisories/459
Related Vulnerabilities
CVE-2020-7757 Vulnerability in npm package droppy
CVE-2022-41248 Vulnerability in maven package org.jenkins-ci.plugins:bigpanda-jenkins
CVE-2023-22491 Vulnerability in npm package gatsby-transformer-remark
CVE-2021-28163 Vulnerability in maven package org.eclipse.jetty:jetty-deploy
CVE-2022-38180 Vulnerability in maven package io.ktor:ktor-client-core