Description
serve node module suffers from Improper Handling of URL Encoding by permitting access to ignored files if a filename is URL encoded.
Remediation
References
https://hackerone.com/reports/308721
Related Vulnerabilities
CVE-2022-39322 Vulnerability in npm package @keystone-6/core
CVE-2021-28092 Vulnerability in maven package org.webjars.npm:is-svg
CVE-2021-46366 Vulnerability in maven package info.magnolia:magnolia-core
CVE-2020-9447 Vulnerability in maven package com.googlecode.gwtupload:gwtupload-samples
CVE-2019-5427 Vulnerability in maven package com.mchange:c3p0