connect node module before 2.14.0 suffers from a Cross-Site Scripting XSS vulnerability due to a lack of validation of file in directory.js middleware...
5.4CVSS5.2AI score0.01315EPSS
SaveExploits1References3
OSV•added 2018/06/07 2:29 a.m.•3 views
UBUNTU-CVE-2018-3717
connect node module before 2.14.0 suffers from a Cross-Site Scripting XSS vulnerability due to a lack of validation of file in directory.js middleware...
