Description
Cross-site scripting (XSS) vulnerability in min-http-server (all versions) allows an attacker with access to the server file system to execute arbitrary JavaScript code in victim's browser.
Remediation
References
https://hackerone.com/reports/570568
Related Vulnerabilities
CVE-2022-0198 Vulnerability in maven package edu.stanford.nlp:stanford-corenlp
CVE-2022-23457 Vulnerability in maven package org.owasp.esapi:esapi
CVE-2022-3171 Vulnerability in maven package com.google.protobuf:protobuf-kotlin
CVE-2022-24613 Vulnerability in maven package com.drewnoakes:metadata-extractor
CVE-2022-38900 Vulnerability in npm package decode-uri-component