Description
A path traversal vulnerability in <= v0.2.6 of http-file-server npm module allows attackers to list files in arbitrary folders.
Remediation
References
https://hackerone.com/reports/570133
Related Vulnerabilities
CVE-2023-34238 Vulnerability in npm package gatsby-plugin-mdx
CVE-2020-36379 Vulnerability in npm package aaptjs
CVE-2019-18798 Vulnerability in maven package org.webjars.npm:node-sass
CVE-2021-25913 Vulnerability in npm package set-or-get
CVE-2023-40342 Vulnerability in maven package org.jenkins-ci.plugins:flaky-test-handler