Hackerone Serve Node Module vulnerabilities
2 vulnerabilities
Known vulnerabilities in Hackerone Serve Node Module, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2018-3718hackeroneserve node module+2
EPSS score1.29%
serve node module suffers from Improper Handling of URL Encoding by permitting access to ignored files if a filename is URL encoded.CVE-2018-3712hackeroneserve node module+2EPSS score1.79%
serve node module before 6.4.9 suffers from a Path Traversal vulnerability due to not handling %2e (.) and %2f (/) and allowing them in paths, which allows a malicious user to view the contents of any directory with known path.