Description
simplehttpserver node module suffers from a Cross-Site Scripting vulnerability to a lack of validation of file names.
Remediation
References
https://hackerone.com/reports/309648
Related Vulnerabilities
CVE-2015-0266 Vulnerability in maven package org.apache.ranger:ranger
CVE-2023-26143 Vulnerability in npm package blamer
CVE-2020-36376 Vulnerability in npm package aaptjs
CVE-2020-8127 Vulnerability in maven package org.webjars.bower:reveal.js
CVE-2022-24785 Vulnerability in maven package org.webjars.bower:moment