Description
simplehttpserver node module suffers from a Cross-Site Scripting vulnerability to a lack of validation of file names.
Remediation
References
https://hackerone.com/reports/309648
Related Vulnerabilities
CVE-2020-7676 Vulnerability in maven package org.webjars.bowergithub.angular:angular
CVE-2023-27602 Vulnerability in maven package org.apache.linkis:linkis-dist
CVE-2022-41401 Vulnerability in maven package org.openrefine:main
CVE-2022-41854 Vulnerability in maven package org.yaml:snakeyaml
CVE-2018-1306 Vulnerability in maven package org.apache.portals.pluto:portletv3annotateddemo