EUVD-2018-0340

Malware in sbrugna...

hekto node module path traversal vulnerability

hekto node module is a module to support single page applications. A path traversal vulnerability exists in the hekto node module, which stems from the program's lack of file path filtering. An attacker can exploit this vulnerability to read the contents of an arbitrary file...

CVE-2018-3725

hekto node module suffers from a Path Traversal vulnerability due to lack of validation of file, which allows a malicious user to read content of any file with known path...

Path traversal

hekto node module suffers from a Path Traversal vulnerability due to lack of validation of file, which allows a malicious user to read content of any file with known path...

PT-2018-16149 · Node · Hekto

Name of the Vulnerable Software and Affected Versions: hekto versions prior to 0.2.3 Description: The hekto node module has a Path Traversal issue due to inadequate validation of file paths, allowing a malicious user to read the content of any file with a known path. This enables a remote attacke...