Lucene search
GoogleOSV:GHSA-VFP9-GWRH-WQ9GHistoryJul 18, 2018 - 9:20 p.m.
Path Traversal in crud-file-server
2018-07-1821:20:19
Google
osv.dev
4
0.002 Low
EPSS
Percentile
62.1%
Versions of crud-file-server prior to 0.9.0 are vulnerable to Path Traversal. The package fails to sanitize URLs, allowing attackers to access server files outside of the served folder using relative paths.
Recommendation
Upgrade to version 0.9.0 or later.
| CPE | Name | Operator | Version |
|---|---|---|---|
| crud-file-server | lt | 0.9.0 |
Related
cve
cve
CVE-2018-3733
2018-05-29 20:29:02
nodejs
nodejs
Path Traversal
2019-06-19 15:31:19
nvd
nvd
CVE-2018-3733
2018-05-29 20:29:02
cvelist
cvelist
CVE-2018-3733
2018-04-26 00:00:00
prion
prion
Path traversal
2018-05-29 20:29:00
github
github
Path Traversal in crud-file-server
2018-07-18 21:20:19
veracode
veracode
Directory Traversal
2018-04-04 06:50:55
osv
osv
CVE-2018-3733
2018-05-29 20:29:02
hackerone
hackerone