Количество 2
Количество 2
CVE-2017-18355
около 7 лет назад
Installed packages are exposed by node_modules in Rendertron 1.0.0, allowing remote attackers to read absolute paths on the server by examining the "_where" attribute of package.json files.
CVSS3: 7.5
EPSS: Низкий
GHSA-vqmr-957g-r7w3
почти 7 лет назад
Rendertron discloses absolute paths of files
CVSS3: 7.5
EPSS: Низкий
Уязвимостей на страницу
20
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2017-18355 Installed packages are exposed by node_modules in Rendertron 1.0.0, allowing remote attackers to read absolute paths on the server by examining the "_where" attribute of package.json files. | CVSS3: 7.5 | 0% Низкий | около 7 лет назад | |
GHSA-vqmr-957g-r7w3 Rendertron discloses absolute paths of files | CVSS3: 7.5 | 0% Низкий | почти 7 лет назад |
Уязвимостей на страницу
20