Description
crud-file-server node module before 0.8.0 suffers from a Cross-Site Scripting vulnerability to a lack of validation of file names.
Remediation
References
https://github.com/omphalos/crud-file-server/commit/4155bfe068bf211b49a0b3ffd06e78cbaf1b40fa
https://hackerone.com/reports/311101
Related Vulnerabilities
CVE-2018-12691 Vulnerability in maven package org.onosproject:onos-apps-acl
CVE-2022-29237 Vulnerability in maven package org.opencastproject:opencast-ingest-service-impl
CVE-2022-37262 Vulnerability in npm package steal
CVE-2021-23567 Vulnerability in npm package colors
CVE-2021-23797 Vulnerability in npm package http-server-node