Description
A Path Traversal in simplehttpserver versions <=0.2.1 allows to list any file in another folder of web root.
Remediation
References
https://hackerone.com/reports/403703
Related Vulnerabilities
CVE-2018-1000644 Vulnerability in maven package org.eclipse.rdf4j:rdf4j-rio-trix
CVE-2020-2292 Vulnerability in maven package org.jenkins-ci.plugins:release
CVE-2020-7672 Vulnerability in npm package mosc
CVE-2020-2304 Vulnerability in maven package org.jenkins-ci.plugins:subversion
CVE-2018-11041 Vulnerability in maven package org.cloudfoundry.identity:cloudfoundry-identity-uaa