Description
curlrequest through 1.0.1 allows reading any file by populating the file parameter with user input.
Remediation
References
https://github.com/node-js-libs/curlrequest/blob/master/index.js#L239%2C
https://snyk.io/vuln/SNYK-JS-CURLREQUEST-568274
Related Vulnerabilities
CVE-2020-7733 Vulnerability in maven package org.webjars.bowergithub.faisalman:ua-parser-js
CVE-2023-3696 Vulnerability in npm package mongoose
CVE-2022-29648 Vulnerability in maven package com.jflyfox:jflyfox_jfinal
CVE-2021-21695 Vulnerability in maven package org.jenkins-ci.main:jenkins-core
CVE-2018-14042 Vulnerability in maven package org.fujion.webjars:bootstrap