Description
iter-server is a static file server. iter-server is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
Remediation
References
https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/iter-server
https://nodesecurity.io/advisories/454
Related Vulnerabilities
CVE-2023-49447 Vulnerability in maven package com.jfinal:jfinal
CVE-2023-48088 Vulnerability in maven package com.xuxueli:xxl-job-admin
CVE-2021-23383 Vulnerability in maven package org.webjars.npm:handlebars
CVE-2021-21353 Vulnerability in maven package org.webjars.npm:pug-code-gen
CVE-2023-34659 Vulnerability in maven package org.jeecgframework.boot:jeecg-boot-parent