CVE-2018-3744

CVE-2018-3744

Vendor Hackerone

Product html-pages node module

Weakness CWE-35

Published May 29, 2018

Last update September 16, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The html-pages node module contains a path traversal vulnerabilities that allows an attacker to read any file from the server with cURL.

Key dates

02Disclosure timeline

May 29, 2018 CVE published

September 16, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2018-3744 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/35.html

Related vulnerabilities

04Related CVE

CVE-2024-0113 CVE-2025-22786 WordPress ElementInvader Addons for Elementor plugin <= 1.2.6 - Local File Inclusion vulnerability CVE-2026-24315 Path Traversal Vulnerability in SAP Fiori (launchpad) CVE-2025-27010 WordPress Tastyc < 2.5.2 - Local File Inclusion Vulnerability CVE-2025-39475 WordPress Arlo theme <= 6.0.3 - Local File Inclusion Vulnerability