Lucene search
GoogleOSV:CVE-2017-18355HistoryDec 17, 2018 - 7:29 a.m.
CVE-2017-18355
2018-12-1707:29:00
Google
osv.dev
3
Installed packages are exposed by node_modules in Rendertron 1.0.0, allowing remote attackers to read absolute paths on the server by examining the “_where” attribute of package.json files.
Related
cvelist
cvelist
CVE-2017-18355
2018-12-17 06:00:00
nvd
nvd
CVE-2017-18355
2018-12-17 07:29:00
cve
cve
CVE-2017-18355
2018-12-17 07:29:00
osv
osv
Rendertron discloses absolute paths of files
2019-02-12 15:36:39
prion
prion
Code injection
2018-12-17 07:29:00
github
github
Rendertron discloses absolute paths of files
2019-02-12 15:36:39