Description
ltt is a static file server. ltt is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
Remediation
References
https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/ltt
https://nodesecurity.io/advisories/422
Related Vulnerabilities
CVE-2017-16038 Vulnerability in npm package f2e-server
CVE-2020-7656 Vulnerability in maven package org.webjars.bowergithub.jquery:jquery
CVE-2020-19697 Vulnerability in npm package editor.md
CVE-2022-35143 Vulnerability in npm package raneto
CVE-2022-24947 Vulnerability in maven package org.apache.jspwiki:jspwiki-main