Description
A path traversal vulnerability was found in module static-resource-server 1.7.2 that allows unauthorized read access to any file on the server by appending slashes in the URL.
Remediation
References
https://hackerone.com/reports/432600
Related Vulnerabilities
CVE-2021-32819 Vulnerability in npm package squirrelly
CVE-2022-29161 Vulnerability in maven package org.xwiki.platform:xwiki-platform-crypto
CVE-2022-25852 Vulnerability in npm package pg-native
CVE-2021-23346 Vulnerability in npm package html-parse-stringify
CVE-2022-35961 Vulnerability in npm package @openzeppelin/contracts-upgradeable