Hackerone Connect Node Module vulnerabilities

1 vulnerability

Known vulnerabilities in Hackerone Connect Node Module, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.4CVE-2018-3717debiannode-connect+4
EPSS score
1.31%
connect node module before 2.14.0 suffers from a Cross-Site Scripting (XSS) vulnerability due to a lack of validation of file in directory.js middleware.