Description
public node module suffers from a Path Traversal vulnerability due to lack of validation of filePath, which allows a malicious user to read content of any file with known path.
Remediation
References
https://hackerone.com/reports/312918
Related Vulnerabilities
CVE-2022-31160 Vulnerability in maven package org.webjars.npm:jquery-ui
CVE-2020-28502 Vulnerability in npm package xmlhttprequest-ssl
CVE-2020-7598 Vulnerability in npm package minimist
CVE-2021-4264 Vulnerability in maven package org.webjars.bower:dustjs-linkedin
CVE-2022-45143 Vulnerability in maven package org.apache.tomcat:tomcat-util