Description
stattic node module suffers from a Path Traversal vulnerability due to lack of validation of path, which allows a malicious user to read content of any file with known path.
Remediation
References
https://hackerone.com/reports/319003
Related Vulnerabilities
CVE-2021-41184 Vulnerability in npm package jquery-ui
CVE-2020-9489 Vulnerability in maven package org.apache.tika:tika-parsers
CVE-2021-3780 Vulnerability in npm package peertube
CVE-2020-13942 Vulnerability in maven package org.apache.unomi:unomi-persistence-elasticsearch-core
CVE-2014-3577 Vulnerability in maven package org.apache.httpcomponents:httpclient