general-file-server

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

High 7.5

CVE-2018-3724

Path Traversal in general-file-server

general-file-server node module suffers from a Path Traversal vulnerability due to lack of validation of currpath, which allows a malicious user to read content of any file with known path.

HackerOne general-file-server node module general-file-server npm

Jun 7, 2018