Crud-file-server Node Module (Hackerone) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2018-06-07. Vendor: Hackerone.

CVEs of Crud-file-server Node Module

• CVE-2018-3726 - CVSS 6.1 (medium), 2018-06-07: crud-file-server node module before 0.8.0 suffers from a Cross-Site Scripting vulnerability to a lack of validation of file names.
• CVE-2018-3733 - CVSS 7.5 (high), 2018-05-29: crud-file-server node module before 0.9.0 suffers from a Path Traversal vulnerability due to incorrect validation of url, which allows a malicious user to…