Description
The fileview package v0.1.6 has inadequate output encoding and escaping, which leads to a stored Cross-Site Scripting (XSS) vulnerability in files it serves.
Remediation
References
https://hackerone.com/reports/507159
Related Vulnerabilities
CVE-2023-27848 Vulnerability in npm package broccoli-compass
CVE-2019-14862 Vulnerability in maven package org.webjars.bowergithub.knockout:knockout
CVE-2021-32824 Vulnerability in maven package org.apache.dubbo:dubbo-common
CVE-2018-3744 Vulnerability in npm package html-pages
CVE-2022-31160 Vulnerability in maven package org.webjars:jquery-ui