CVE-2018-3744

The html-pages node module contains a path traversal vulnerabilities that allows an attacker to read any file from the server with cURL.

Score

CVSS 3.1 9.8 Critical

Status

Modified - support@hackerone.com

Published

2018-05-29

Last modified

2024-09-16

Weaknesses

CWE-22, CWE-35

Affected products

• Html-pages Node Module (Hackerone)
• Html-pages (Html-pages Project)

References

• https://github.com/danielcardoso/html-pages/issues/2
• https://hackerone.com/reports/306607