CVE-2018-16482

Опубликовано: 01 фев. 2019

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

A server directory traversal vulnerability was found on node module mcstatic <=0.0.20 that would allow an attack to access sensitive information in the file system by appending slashes in the URL path.

Ссылки

https://hackerone.com/reports/330285
Third Party Advisory
https://hackerone.com/reports/330285
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:mcstatic_project:mcstatic:*:*:*:*:*:node.js:*:*

Версия до 0.0.20 (включая)

EPSS

Процентиль: 67%

0.0053

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-22

Связанные уязвимости

GHSA-cxmj-qjv6-vx9p