CVE-2018-16493

A path traversal vulnerability was found in module static-resource-server 1.7.2 that allows unauthorized read access to any file on the server by appending slashes in the URL.

Score

CVSS 3.0 7.5 High

Status

Modified - support@hackerone.com

Published

2019-02-01

Last modified

2024-08-05

Weaknesses

CWE-22, CWE-548

Affected products

• Static-resource-server (Hackerone)
• Static-resource-server (Static-resource-server Project)

References

• https://hackerone.com/reports/432600