CVE-2018-16482 - AskarLabs CVE Database

CVE-2018-16482

Vendor Hackerone

Product mcstatic

Weakness CWE-22 · Path traversal

Published February 1, 2019

Last update August 5, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A server directory traversal vulnerability was found on node module mcstatic <=0.0.20 that would allow an attack to access sensitive information in the file system by appending slashes in the URL path.

Key dates

02Disclosure timeline

February 1, 2019 CVE published

August 5, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2018-16482 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/22.html

Related vulnerabilities

04Related CVE

CVE-2024-7927 ZZCMS class.php path traversal CVE-2025-60722 Microsoft OneDrive for Android Elevation of Privilege Vulnerability CVE-2025-66645 NiceGUI Path Traversal Vulnerability in app.add_media_files() Allows Arbitrary File Reading CVE-2025-39568 WordPress StoreContrl Woocommerce plugin <= 4.1.3 - Arbitrary File Download Vulnerability CVE-2026-48944 Joomla Extension - getk2.org - Exposure of sensitive files via attachment copy in K2 extension for Joomla < 2.26