Description
node-srv node module suffers from a Path Traversal vulnerability due to lack of validation of url, which allows a malicious user to read content of any file with known path.
Remediation
References
https://hackerone.com/reports/309124
Related Vulnerabilities
CVE-2022-25875 Vulnerability in maven package org.webjars.npm:svelte
CVE-2022-43421 Vulnerability in maven package org.jenkins-ci.plugins:tuleap-git-branch-source
CVE-2020-26939 Vulnerability in maven package org.bouncycastle:bcprov-ext-jdk15to18
CVE-2022-21192 Vulnerability in npm package serve-lite
CVE-2021-21617 Vulnerability in maven package org.jenkins-ci.plugins: configurationslicing