CVE-2018-3733

Published: May 29, 2018

Modified: Sep 17, 2024

PUBLISHED

Description

crud-file-server node module before 0.9.0 suffers from a Path Traversal vulnerability due to incorrect validation of url, which allows a malicious user to read content of any file with known path.

Vendor	Product	Versions
HackerOne	crud-file-server node module	affected `Versions before 0.9.0`

Weaknesses (CWE)

CWE-22

References

https://hackerone.com/reports/310690

x_refsource_MISC

https://github.com/omphalos/crud-file-server/commit/4fc3b404f718abb789f4ce4272c39c7a138c7a82

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2018-3733

Description

Affected Products

Weaknesses (CWE)

References