Critical severity vulnerability that affects crud-file-server

2018-07-18T18:34:27
ID GHSA-H24F-9MM4-W336
Type github
Reporter GitHub Advisory Database
Modified 2019-07-03T21:02:01

Description

crud-file-server node module before 0.8.0 suffers from a Cross-Site Scripting vulnerability to a lack of validation of file names.