Description
stattic node module suffers from a Path Traversal vulnerability due to lack of validation of path, which allows a malicious user to read content of any file with known path.
Remediation
References
https://hackerone.com/reports/319003
Related Vulnerabilities
CVE-2018-18854 Vulnerability in maven package io.spray:spray-json_2.12
CVE-2021-25646 Vulnerability in maven package org.apache.druid:druid-core
CVE-2020-28246 Vulnerability in npm package formio
CVE-2023-30529 Vulnerability in maven package org.jenkins-ci.plugins:lucene-search
CVE-2020-35451 Vulnerability in maven package org.apache.oozie:oozie-tools