cve/CVE-2018-3717.md at 7482ec4521a75dd13882dc1283f17009c936e974

admin/cve

Fork 0

mirror of https://github.com/0xMarcio/cve.git synced 2025-05-28 09:12:08 +00:00

0xMarcio ba290685fe Update CVE sources 2024-06-09 00:33

2024-06-09 00:33:16 +00:00

803 B

Raw Blame History

CVE-2018-3717

Description

connect node module before 2.14.0 suffers from a Cross-Site Scripting (XSS) vulnerability due to a lack of validation of file in directory.js middleware.

POC

Reference

https://hackerone.com/reports/309394
https://hackerone.com/reports/309394
https://hackerone.com/reports/309641
https://hackerone.com/reports/309641

Github

https://github.com/ARPSyndicate/cvemon

803 B Raw Blame History

CVE-2018-3717

Description

POC

Reference

Github

803 B

Raw Blame History