Read the docs

Html-pages Project

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Html-pages Project records in CISA KEV

No Html-pages Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Html-pages 2 records MEDIUM

Records

2 records in Html-pages · all components

TI-2018-02740 CVE-2018-3744 · GHSA-fm87-46vv-jqrr

Path traversal in HackerOne html-pages node module

Priority MEDIUM 46

The html-pages node module contains a path traversal vulnerabilities that allows an attacker to read any file from the server with cURL.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02224 Published 2018-05-29 No fix listed CWE-35
TI-2018-11823 CVE-2018-16481 · GHSA-5p26-hw7f-3cpr

Cross-site scripting in HackerOne html-pages

Priority LOW 28

A XSS vulnerability was found in html-page <=2.1.1 that allows malicious Javascript code to be executed in the user's browser due to the absence of sanitization of the paths before rendering.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00691 Published 2019-02-01 No fix listed CWE-79
Open these records in search →