Description
The html-pages node module contains a path traversal vulnerabilities that allows an attacker to read any file from the server with cURL.
Remediation
References
https://github.com/danielcardoso/html-pages/issues/2
https://hackerone.com/reports/306607
Related Vulnerabilities
CVE-2023-26486 Vulnerability in maven package org.webjars.npm:vega
CVE-2022-31189 Vulnerability in maven package org.dspace:dspace-jspui
CVE-2022-33140 Vulnerability in maven package org.apache.nifi.registry:nifi-registry-framework
CVE-2018-1002201 Vulnerability in maven package org.zeroturnaround:zt-zip
CVE-2020-5259 Vulnerability in maven package org.webjars.bowergithub.dojo:dojox