high7.5
CVE-2018-3732
resolve-path node module before 1.4.0 suffers from a Path Traversal vulnerability due to lack of validation of paths with certain special characters, which all…
Impact
resolve-path node module before 1.4.0 suffers from a Path Traversal vulnerability due to lack of validation of paths with certain special characters, which allows a malicious user to read content of any file with known path.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Resolve-Path Project | Resolve-Path | before 1.4.0 |