Description
Cross-site scripting (XSS) vulnerability in min-http-server (all versions) allows an attacker with access to the server file system to execute arbitrary JavaScript code in victim's browser.
Remediation
References
https://hackerone.com/reports/570568
Related Vulnerabilities
CVE-2021-26920 Vulnerability in maven package org.apache.druid:druid-core
CVE-2022-21129 Vulnerability in npm package nemo-appium
CVE-2020-26238 Vulnerability in maven package com.cronutils:cron-utils
CVE-2019-5475 Vulnerability in maven package org.sonatype.nexus.plugins:nexus-yum-repository-plugin