NetSight
medium6.5

CVE-2018-3713

angular-http-server node module suffers from a Path Traversal vulnerability due to lack of validation of possibleFilename, which allows a malicious user to rea…

Impact

angular-http-server node module suffers from a Path Traversal vulnerability due to lack of validation of possibleFilename, which allows a malicious user to read content of any file with known path.

Affected products

VendorProductAffected versions
Angular-Http-Server ProjectAngular-Http-Server
All versions

Weakness classification

References