Description
A path traversal vulnerability in servey version < 3 allows an attacker to read content of any arbitrary file.
Remediation
References
https://hackerone.com/reports/355501
Related Vulnerabilities
CVE-2022-36919 Vulnerability in maven package org.jenkins-ci.plugins:coverity
CVE-2021-43859 Vulnerability in maven package com.thoughtworks.xstream:xstream
CVE-2023-27602 Vulnerability in maven package org.apache.linkis:linkis-dist
CVE-2023-36479 Vulnerability in maven package org.eclipse.jetty.ee10:jetty-ee10-servlets
CVE-2022-23221 Vulnerability in maven package com.h2database:h2