Description

A Path Traversal in simplehttpserver versions <=0.2.1 allows to list any file in another folder of web root.

Remediation

References

https://hackerone.com/reports/403703

Related Vulnerabilities

CVE-2023-3224 Vulnerability in npm package nuxt

CVE-2022-45388 Vulnerability in maven package net.praqma:config-rotator

CVE-2016-10669 Vulnerability in npm package soci

CVE-2020-28447 Vulnerability in npm package xopen

CVE-2019-10799 Vulnerability in npm package compile-sass

Severity

Medium

Classification

CWE-22 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Tags

Third Party Advisory