CVE-2018-3713
N/A
N/A
Summary
angular-http-server node module suffers from a Path Traversal vulnerability due to lack of validation of possibleFilename, which allows a malicious user to read content of any file with known path.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| HackerOne | angular-http-server node module | All versions | affected |
Weaknesses
- CWE-22: Path Traversal (CWE-22)
ADP Enrichment
CVE Program Container
Additional References
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.