Description
uv-tj-demo is a static file server. uv-tj-demo is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
Remediation
References
https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/uv-tj-demo
https://nodesecurity.io/advisories/428
Related Vulnerabilities
CVE-2017-18353 Vulnerability in npm package rendertron-middleware
CVE-2023-22894 Vulnerability in npm package @strapi/strapi
CVE-2019-10754 Vulnerability in maven package org.apereo.cas:cas-server-support-shell
CVE-2017-16139 Vulnerability in npm package jikes
CVE-2023-50449 Vulnerability in maven package com.jfinal:jfinal