Description
FUXA <= 1.1.12 is vulnerable to Local via Inclusion via /api/download.
Remediation
References
https://github.com/MateusTesser/CVE-2023-31718
https://github.com/frangoteam/FUXA
https://youtu.be/VCQkEGntN04
Related Vulnerabilities
CVE-2019-19771 Vulnerability in npm package babel-loqder
CVE-2017-1000042 Vulnerability in maven package org.webjars.npm:mapbox.js
CVE-2017-5649 Vulnerability in maven package org.apache.geode:geode-pulse
CVE-2020-7702 Vulnerability in npm package templ8
CVE-2016-15026 Vulnerability in maven package com.googlecode.plist:dd-plist