CVE-2018-3712

2018-06-0702:29:07

Google

osv.dev

0.001 Low

EPSS

Percentile

37.2%

JSON

serve node module before 6.4.9 suffers from a Path Traversal vulnerability due to not handling %2e (.) and %2f (/) and allowing them in paths, which allows a malicious user to view the contents of any directory with known path.

CPENameOperatorVersion
serveeq4.0.0
serveeq0.3.0
serveeq2.4.1
serveeq6.4.5
serveeq0.1.1
serveeq0.5.0
serveeq6.3.0
serveeq3.2.2
serveeq5.0.3
serveeq6.4.4