CVE-2018-3729 Path Traversal in localhost-now
HighCVSS 7.5
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
localhost-now node module suffers from a Path Traversal vulnerability due to lack of validation of file, which allows a malicious user to read content of any file with known path.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| npm localhost-now(npm) | < 1.0.2 | 1.0.2 |
| localhost-now project localhost-now | = 1.0.1 | No fix listed |
| HackerOne localhost-now node module | = All versions | No fix listed |
References
- nvd.nist.gov third-party-advisory
- github.com patch
- hackerone.com exploit third-party-advisory
- github.com
- www.npmjs.com