NetSight
medium5.3

CVE-2018-3718

serve node module suffers from Improper Handling of URL Encoding by permitting access to ignored files if a filename is URL encoded.

Impact

serve node module suffers from Improper Handling of URL Encoding by permitting access to ignored files if a filename is URL encoded.

Affected products

VendorProductAffected versions
ZeitServe
before 6.5.2

Weakness classification

References