4 matches found
CVE-2018-3733
crud-file-server node module before 0.9.0 suffers from a Path Traversal vulnerability due to incorrect validation of url, which allows a malicious user to read content of any file with known path...
CVE-2018-3733
crud-file-server node module before 0.9.0 suffers from a Path Traversal vulnerability due to incorrect validation of url, which allows a malicious user to read content of any file with known path...
CVE-2018-3733
The vulnerability CVE-2018-3733 affects the NodeJS package crud-file-server (prior to version 0.9.0). It stems from incorrect validation/sanitation of URLs, enabling a path traversal that lets an attacker read files outside the served directory. Impact is read access to arbitrary files with known...
CVE-2018-3733
crud-file-server node module before 0.9.0 suffers from a Path Traversal vulnerability due to incorrect validation of url, which allows a malicious user to read content of any file with known path...