Description
A XSS vulnerability was found in module m-server <1.4.2 that allows malicious Javascript code or HTML to be executed, due to the lack of escaping for special characters in folder names.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HackerOne | m-server | <1.4.2 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | m-server | < 1.4.2 | 1.4.2 | GHSA-gmxv-xf2q-6j8m |