CVE-2018-3744

CRITICAL

Html-pages - Path Traversal

Title source: rule

The html-pages node module contains a path traversal vulnerabilities that allows an attacker to read any file from the server with cURL.

github NO CODE

by bl4de · poc

CVSS v3 9.8

EPSS 0.0043

EPSS Percentile 62.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-22 CWE-35

Status published

Products (2)

html-pages_project/html-pages 2.0.7

npm/html-pages 0npm

Published May 29, 2018

Tracked Since Feb 18, 2026