4/27/2023
•
EN
Disclosing a local file inclusion vulnerability in xmlhttprequest library
Discloses a Local File Inclusion vulnerability in the xmlhttprequest npm package, allowing arbitrary file reads due to insecure default permissions.