Hackerone Crud File Server Node Module vulnerabilities

2 vulnerabilities

Known vulnerabilities in Hackerone Crud File Server Node Module, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.1CVE-2018-3726crud-file-server_projectcrud-file-server+2
EPSS score
1.06%
crud-file-server node module before 0.8.0 suffers from a Cross-Site Scripting vulnerability to a lack of validation of file names.7.5CVE-2018-3733crud-file-server_projectcrud-file-server+2
EPSS score
2.18%
crud-file-server node module before 0.9.0 suffers from a Path Traversal vulnerability due to incorrect validation of url, which allows a malicious user to read content of any file with known path.