Description
A Path traversal exists in http_server which allows an attacker to read arbitrary system files.
Remediation
References
https://hackerone.com/reports/692262
Related Vulnerabilities
CVE-2020-6449 Vulnerability in npm package electron
CVE-2021-23901 Vulnerability in maven package org.apache.nutch:nutch
CVE-2020-6836 Vulnerability in maven package org.webjars.npm:hot-formula-parser
CVE-2021-40660 Vulnerability in maven package org.javadelight:delight-nashorn-sandbox
CVE-2023-29518 Vulnerability in maven package org.xwiki.platform:xwiki-platform-invitation-ui