Mcstatic Node Module (Hackerone) - vulnerabilities (CVEs)

1 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2018-06-07. Vendor: Hackerone.

CVEs of Mcstatic Node Module

• CVE-2018-3730 - CVSS 7.5 (high), 2018-06-07: mcstatic node module suffers from a Path Traversal vulnerability due to lack of validation of filePath, which allows a malicious user to read content of any…