Loading HuntDB...
Hunt
Vulnerability Intelligence by wss.sh
Home Daily Briefings High Impact CVEs Recent Exploits KEV Catalog GitHub Advisories Latest Updates Security News
Sign In Sign Up

CVE-2018-3729

UNKNOWN
Published 2018-06-07T02:00:00Z
Actions:

Expert Analysis

Professional remediation guidance

Get tailored security recommendations from our analyst team for CVE-2018-3729. We'll provide specific mitigation strategies based on your environment and risk profile.

No CVSS data available

Description

localhost-now node module suffers from a Path Traversal vulnerability due to lack of validation of file, which allows a malicious user to read content of any file with known path.

Available Exploits

No exploits available for this CVE.

Related News

No news articles found for this CVE.

Affected Products

HackerOne

localhost-now node module

Affected Versions:

All versions

GitHub Security Advisories

Community-driven vulnerability intelligence from GitHub

✓ GitHub Reviewed HIGH

Path Traversal in localhost-now

GHSA-2gjg-5x33-mmp2

Advisory Details

Versions of `localhost-now` before 1.0.2 are vulnerable to path traversal. This allows a remote attacker to read the content of an arbitrary file. ## Recommendation Update to version 1.0.2 or later.

Affected Packages

npm localhost-now
ECOSYSTEM: ≥0 <1.0.2

CVSS Scoring

CVSS Score

7.5

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2018-3729
WEB https://github.com/DCKT/localhost-now/commit/30b004c7f145d677df8800a106c2edc982313995#diff-b9cfc7f2cdf78a7f4b91a753d10865a2
WEB https://hackerone.com/reports/312889
ADVISORY https://github.com/advisories/GHSA-2gjg-5x33-mmp2
WEB https://www.npmjs.com/advisories/582

Advisory provided by GitHub Security Advisory Database. Published: July 25, 2018, Modified: March 1, 2023

References

https://hackerone.com/reports/312889
Published: 2018-06-07T02:00:00Z
Last Modified: 2024-09-16T18:45:17.550Z
Copied to clipboard!