HackerOne

serve node module

2 Versions 2 CVEs

Versions

Versions before 6.4.9

OTHER 1 CVE

All versions

OTHER 1 CVE

Recent CVEs

CVE-2018-3718

serve node module suffers from Improper Handling of URL Encoding by permitting access to ignored files if a filename is URL encoded.

UNKNOWN Jun 07, 2018

serve node module before 6.4.9 suffers from a Path Traversal vulnerability due to not handling %2e (.) and %2f (/) and allowing them in paths, which allows a malicious user to view the contents of any directory with known path.