Read the docs

Crud-file-server Project

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Crud-file-server Project records in CISA KEV

No Crud-file-server Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Crud-file-server 2 records LOW

Records

2 records

TI-2018-02731 CVE-2018-3733 · GHSA-vfp9-gwrh-wq9g

Path traversal in HackerOne crud-file-server node module

Priority LOW 37

crud-file-server node module before 0.9.0 suffers from a Path Traversal vulnerability due to incorrect validation of url, which allows a malicious user to read content of any file with known path.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02167 Published 2018-05-29 Fixed in 0.9.0 CWE-22
TI-2018-02724 CVE-2018-3726 · GHSA-h24f-9mm4-w336

Cross-site scripting in HackerOne crud-file-server node module

Priority LOW 29

crud-file-server node module before 0.8.0 suffers from a Cross-Site Scripting vulnerability to a lack of validation of file names.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01061 Published 2018-06-07 Fixed in 0.8.0 CWE-79
Open these records in search →