Hekto Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Hekto Project records in CISA KEV

No Hekto Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Hekto 2 records LOW

Records

2 records

TI-2018-02723 CVE-2018-3725 · GHSA-x26f-26qw-hhhx

Path traversal in HackerOne hekto node module

LOW 37

hekto node module suffers from a Path Traversal vulnerability due to lack of validation of file, which allows a malicious user to read content of any file with known path.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02007 Published 2018-06-07 Fixed in 0.2.3 CWE-22

TI-2018-02739 CVE-2018-3743 · GHSA-qmm9-x5gr-4gfm

Open redirect in hekto <=0.2.3 when target domain name is used as html filename on server.

LOW 29

Open redirect in hekto <=0.2.3 when target domain name is used as html filename on server.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00917 Published 2018-06-01 Fixed in 0.2.4 CWE-601

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0