CVE-2019-15600

CVE-2019-15600 concerns the Node.js http_server module (version 1.0.12) with a path traversal that lets an attacker read arbitrary system files. Multiple sources describe a symlink-based traversal: a symbolically linked file in the working directory can cause the server to expose files outside th...