Description
A path traversal vulnerability in servey version < 3 allows an attacker to read content of any arbitrary file.
Remediation
References
https://hackerone.com/reports/355501
Related Vulnerabilities
CVE-2020-7712 Vulnerability in npm package json
CVE-2020-8203 Vulnerability in maven package org.webjars.bowergithub.lodash:lodash
CVE-2020-7633 Vulnerability in npm package apiconnect-cli-plugins
CVE-2019-1003030 Vulnerability in maven package org.jenkins-ci.plugins.workflow:workflow-cps
CVE-2017-3199 Vulnerability in maven package org.graniteds:granite-generator