Description
Cross-site scripting (XSS) vulnerability in http-file-server (all versions) allows an attacker with access to the server file system to execute arbitrary JavaScript code in victim's browser.
Remediation
References
https://hackerone.com/reports/570563
Related Vulnerabilities
CVE-2023-26144 Vulnerability in npm package graphql
CVE-2022-36083 Vulnerability in npm package jose
CVE-2022-2217 Vulnerability in maven package org.webjars.npm:parse-url
CVE-2023-34659 Vulnerability in maven package org.jeecgframework.boot:jeecg-boot-parent
CVE-2020-26302 Vulnerability in maven package org.webjars.bower:is_js