TI-2018-02761 CVE-2018-3766 · GHSA-m8cr-q935-8j67
Path traversal in buttle module versions <= 0.2.0 allows to read any file in the server.
Priority LOW 37
Path traversal in buttle module versions <= 0.2.0 allows to read any file in the server.
Buttle Project
Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Buttle Project records in CISA KEVNo Buttle Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
2 records in Buttle · all components
TI-2019-03832 CVE-2019-5422 · GHSA-gm29-35c7-8cfw
Cross-site scripting in Npm, Inc. buttle
Priority LOW 30
XSS in buttle npm package version 0.2.0 causes execution of attacker-provided code in the victim's browser when an attacker creates an arbitrary file on the server.