CVE-2021-23423

CVE-2021-23423 is a path traversal vulnerability affecting the bikeshed package prior to version 3.0.0. An attacker can exploit this by providing a malicious source file containing include, include-code, or include-raw blocks, leading to the disclosure of arbitrary file contents in the HTML output. With a CVSS score of 7.5 (HIGH), this vulnerability is easily exploitable over the network with no user interaction, resulting in high confidentiality impact. There is currently no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.