Stattic Node Module Path Traversal Vulnerability

The stattic node module is a script that serves static files using the http module. A path traversal vulnerability exists in the stattic node module, which stems from a lack of path validation in the program. An attacker could use this vulnerability to read the contents of an arbitrary file...

Node.js third-party modules: [stattic] Inproper path validation leads to Path Traversal and allows to read arbitrary files with any extension(s)

I would like to report Path Traversal in stattic module. It allows to read content of some arbitrary files from the server where stattic is installed and run. Module module name: stattic version: 0.2.3 npm page: https://www.npmjs.com/package/stattic Module Description Ridiculous simple script for...