Lucene search
Bl4deNODEJS:1003HistoryJun 19, 2019 - 3:31 p.m.
Path Traversal
2019-06-1915:31:19
bl4de
www.npmjs.com
9
0.002 Low
EPSS
Percentile
62.1%
Overview
Versions of crud-file-server prior to 0.9.0 are vulnerable to Path Traversal. The package fails to sanitize URLs, allowing attackers to access server files outside of the served folder using relative paths.
Recommendation
Upgrade to version 0.9.0 or later.
References
| CPE | Name | Operator | Version |
|---|---|---|---|
| crud-file-server | lt | 0.9.0 |
Related
cve
cve
CVE-2018-3733
2018-05-29 20:29:02
osv
osv
Path Traversal in crud-file-server
2018-07-18 21:20:19
CVE-2018-3733
2018-05-29 20:29:02
nvd
nvd
CVE-2018-3733
2018-05-29 20:29:02
cvelist
cvelist
CVE-2018-3733
2018-04-26 00:00:00
prion
prion
Path traversal
2018-05-29 20:29:00
github
github
Path Traversal in crud-file-server
2018-07-18 21:20:19
veracode
veracode
Directory Traversal
2018-04-04 06:50:55
hackerone
hackerone