CVE-2018-3744 Path Traversal in html-pages
CriticalCVSS 9.8
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The html-pages node module contains a path traversal vulnerabilities that allows an attacker to read any file from the server with cURL.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| npm html-pages(npm) | <= 2.1.2 | No fix listed |
| html-pages project html-pages | = 2.0.7 | No fix listed |
| HackerOne html-pages node module | = Not fixed | No fix listed |
References
- nvd.nist.gov third-party-advisory
- hackerone.com exploit issue-tracking third-party-advisory
- github.com
- www.npmjs.com
- github.com issue-tracking third-party-advisory