description: The html-pages node module contains a path traversal vulnerabilities that allows an attacker to read any file from the server with cURL.
problem types: Path Traversal: '.../...//' (CWE-35)
affected:
{
product: html-pages node module
vendor: HackerOne
versions:
status: affected, version: Not fixed
}