Lucene search

CVE-2018-3725

🗓️ 07 Jun 2018 02:08:29Reported by hackeroneType

Hekto node module Path Traversal vulnerability allows reading any file conten

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 8
Cvelist	CVE-2018-3725	7 Jun 201802:00	–	cvelist
Veracode	Directory Traversal	28 Feb 201817:22	–	veracode
NVD	CVE-2018-3725	7 Jun 201802:29	–	nvd
Hacker One	Node.js third-party modules: [hekto] Path Traversal vulnerability allows to read content of arbitrary files	31 Jan 201823:18	–	hackerone
Node.js	Path Traversal	24 Apr 201815:34	–	nodejs
Github Security Blog	Path Traversal in hekto	26 Jul 201815:22	–	github
Prion	Path traversal	7 Jun 201802:29	–	prion
OSV	Path Traversal in hekto	26 Jul 201815:22	–	osv

Nvd

Node

hekto_project hektoMatch0.2.0node.js

[
  {
    "product": "hekto node module",
    "vendor": "HackerOne",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  }
]

Source	Link
hackerone	www.hackerone.com/reports/311218

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

07 Jun 2018 02:29Current

7.3High risk

Vulners AI Score7.3

CVSS25

CVSS37.5

EPSS0.0064

CWE-22