Description
A path traversal vulnerability in servey version < 3 allows an attacker to read content of any arbitrary file.
Remediation
References
https://hackerone.com/reports/355501
Related Vulnerabilities
CVE-2022-24913 Vulnerability in maven package com.fasterxml.util:java-merge-sort
CVE-2021-46708 Vulnerability in npm package swagger-ui-dist
CVE-2020-11023 Vulnerability in maven package org.webjars.bowergithub.jquery:jquery
CVE-2023-41037 Vulnerability in maven package org.webjars.npm:github-com-openpgpjs-openpgpjs
CVE-2020-7720 Vulnerability in maven package org.webjars.npm:node-forge