Description
crud-file-server node module before 0.9.0 suffers from a Path Traversal vulnerability due to incorrect validation of url, which allows a malicious user to read content of any file with known path.
Remediation
References
https://github.com/omphalos/crud-file-server/commit/4fc3b404f718abb789f4ce4272c39c7a138c7a82
https://hackerone.com/reports/310690
Related Vulnerabilities
CVE-2022-22931 Vulnerability in maven package org.apache.james:james-server
CVE-2022-41710 Vulnerability in npm package electron-markdownify
CVE-2022-1466 Vulnerability in maven package org.keycloak:keycloak-core
CVE-2023-26136 Vulnerability in maven package org.webjars.bowergithub.salesforce:tough-cookie