CVE-2018-3730
N/A
N/A
Summary
mcstatic node module suffers from a Path Traversal vulnerability due to lack of validation of filePath, which allows a malicious user to read content of any file with known path.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| HackerOne | mcstatic node module | All versions | affected |
Weaknesses
- CWE-22: Path Traversal (CWE-22)
ADP Enrichment
CVE Program Container
Additional References
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.