Description
Path traversal vulnerability in http-live-simulator npm package version 1.0.5 allows arbitrary path to be accessed on the file system by a remote attacker.
Remediation
References
https://hackerone.com/reports/384939
Related Vulnerabilities
CVE-2021-41532 Vulnerability in maven package org.apache.ozone:ozone-recon
CVE-2021-41246 Vulnerability in npm package express-openid-connect
CVE-2021-33587 Vulnerability in npm package css-what
CVE-2020-1695 Vulnerability in maven package org.jboss.resteasy:resteasy-jaxrs
CVE-2023-3635 Vulnerability in maven package com.squareup.okio:okio-jvm