CVE-2018-3714
MEDIUM NUCLEINode-srv < 2.1.1 - Path Traversal
Title source: ruleDescription
node-srv node module suffers from a Path Traversal vulnerability due to lack of validation of url, which allows a malicious user to read content of any file with known path.
Exploits (1)
Nuclei Templates (1)
node-srv - Local File Inclusion
MEDIUMby madrobot
Scores
CVSS v3
6.5
EPSS
0.7260
EPSS Percentile
98.8%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Details
CWE
CWE-22
Status
published
Products (2)
node-srv_project/node-srv
npm/node-srv
0 - 2.1.1npm
Published
Jun 07, 2018
Tracked Since
Feb 18, 2026