CVE-2018-3717

2018-06-0702:00:00

CWE-79

hackerone

www.cve.org

EPSS

0.001

Percentile

37.8%

JSON

connect node module before 2.14.0 suffers from a Cross-Site Scripting (XSS) vulnerability due to a lack of validation of file in directory.js middleware.

CNA Affected

[
  {
    "product": "connect node module",
    "vendor": "HackerOne",
    "versions": [
      {
        "status": "affected",
        "version": "Versions before 2.14.0"
      }
    ]
  }
]