high7.5
CVE-2018-3724
general-file-server node module suffers from a Path Traversal vulnerability due to lack of validation of currpath, which allows a malicious user to read conten…
Impact
general-file-server node module suffers from a Path Traversal vulnerability due to lack of validation of currpath, which allows a malicious user to read content of any file with known path.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| General-File-Server Project | General-File-Server | Versions 1.0.0, 1.1.2, 1.1.3, 1.1.4, 1.1.5, 1.1.6 |