Skip to content
OpenAdvisories
High · 7.5 CVE-2018-3734 EUVD-2018-0330GHSA-w4pv-w56c-mg4v

Path Traversal in stattic

Published May 29, 2018 · Updated Sep 17, 2024 · Assigned by hackerone

Description

stattic node module suffers from a Path Traversal vulnerability due to lack of validation of path, which allows a malicious user to read content of any file with known path.

Affected products

VendorProductAffectedFixed
HackerOne stattic node module All versions —

Affected packages

EcosystemPackageAffectedFixedRecord
npm stattic < 0.3.0 0.3.0 GHSA-w4pv-w56c-mg4v

References