Read the docs

Stattic Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Stattic Project records in CISA KEV

No Stattic Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Stattic 1 record LOW

Records

1 record in Stattic · all components

TI-2018-02732 CVE-2018-3734 · GHSA-w4pv-w56c-mg4v

Path traversal in HackerOne stattic node module

Priority LOW 37

stattic node module suffers from a Path Traversal vulnerability due to lack of validation of path, which allows a malicious user to read content of any file with known path.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01876 Published 2018-05-29 Fixed in 0.3.0 CWE-22
Open these records in search →