Serve Node Module (Hackerone) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2018-06-07. Vendor: Hackerone.

CVEs of Serve Node Module

• CVE-2018-3718 - CVSS 5.3 (medium), 2018-06-07: serve node module suffers from Improper Handling of URL Encoding by permitting access to ignored files if a filename is URL encoded.
• CVE-2018-3712 - CVSS 6.5 (medium), 2018-06-07: serve node module before 6.4.9 suffers from a Path Traversal vulnerability due to not handling %2e (.) and %2f (/) and allowing them in paths, which allows a…