Path Traversal in crud-file-server

🗓️ 18 Jul 2018 21:19:20Reported by GitHub Advisory DatabaseType

Vulnerability in crud-file-server prior to 0.9.0

Reporter	Title	Published	Views	Family All 9
OSV	Path Traversal in crud-file-server	18 Jul 201821:20	–	osv
OSV	CVE-2018-3733	29 May 201820:29	–	osv
CVE	CVE-2018-3733	29 May 201820:29	–	cve
Node.js	Path Traversal	19 Jun 201915:31	–	nodejs
Cvelist	CVE-2018-3733	29 May 201820:00	–	cvelist
NVD	CVE-2018-3733	29 May 201820:29	–	nvd
Veracode	Directory Traversal	4 Apr 201806:50	–	veracode
Hacker One	Node.js third-party modules: [crud-file-server] Path Traversal allows to read arbitrary file from the server	31 Jan 201800:14	–	hackerone
Prion	Path traversal	29 May 201820:29	–	prion

Vulners

Node

crud\-file\-server_project crud\-file\-serverRange<0.9.0

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2018-3733
hackerone	www.hackerone.com/reports/310690
github	www.github.com/advisories/GHSA-vfp9-gwrh-wq9g
npmjs	www.npmjs.com/advisories/1003
github	www.github.com/omphalos/crud-file-server/commit/4fc3b404f718abb789f4ce4272c39c7a138c7a82

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

18 Jul 2018 21:20Current

4.6Medium risk

Vulners AI Score4.6

CVSS25

CVSS37.5

EPSS0.00413

CWE-22