Directory Traversal in startserver

Description

All versions of package startserver are vulnerable to Directory Traversal due to missing sanitization.

Recommendation

No fix is available yet. Followings are affected versions:

• <= 1.4.1

References

• GHSA-hqv3-qq72-78cv
• snyk.io
• CVE-2021-23430
• CWE-22
• CAPEC-310
• OWASP 2021-A1
• OWASP 2021-A6

Related Issues

• DOMpurify has a nesting-based mXSS - CVE-2024-47875
• Path Traversal in simplehttpserver - CVE-2018-16478
• Cross-Site Scripting in html-pages - CVE-2018-16481
• Path Traversal in http-server-node - CVE-2021-23797

Tags:

npm

startserver