CVE-2018-3734

CVE-2018-3734

Vendor Hackerone
Product stattic node module
Weakness CWE-22 · Path traversal
Published May 29, 2018
Last update September 17, 2024

CVSS base score

What the vulnerability does

01Description

stattic node module suffers from a Path Traversal vulnerability due to lack of validation of path, which allows a malicious user to read content of any file with known path.

Key dates

02Disclosure timeline

May 29, 2018 CVE published
September 17, 2024 Record updated