Description
general-file-server node module suffers from a Path Traversal vulnerability due to lack of validation of currpath, which allows a malicious user to read content of any file with known path.
Remediation
References
https://hackerone.com/reports/310943
Related Vulnerabilities
CVE-2023-46653 Vulnerability in maven package org.jenkins-ci.plugins:lambdatest-automation
CVE-2020-7607 Vulnerability in npm package gulp-styledocco
CVE-2021-35517 Vulnerability in maven package org.apache.commons:commons-compress
CVE-2022-39353 Vulnerability in npm package xmldom
CVE-2022-22965 Vulnerability in maven package org.springframework:spring-webmvc