CVE-2018-3712: Path Traversal
Published Jun 7, 2018
·Updated
serve node module before 6.4.9 suffers from a Path Traversal vulnerability due to not handling %2e (.) and %2f (/) and allowing them in paths, which allows a malicious user to view the contents of any directory with known path.
Affected Software
1 affected component
ZEIT Serve Node.js<6.4.9
Event History
Jun 7, 2018
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2018-3712?
CVE-2018-3712 is classified as a medium severity vulnerability due to the potential for unauthorized directory access.
2
How do I fix CVE-2018-3712?
To fix CVE-2018-3712, upgrade the serve node module to version 6.4.9 or later.
3
What type of vulnerability is CVE-2018-3712?
CVE-2018-3712 is a Path Traversal vulnerability that allows directory content exposure.
4
Who is affected by CVE-2018-3712?
Users of the serve node module before version 6.4.9 are affected by CVE-2018-3712.
5
Can CVE-2018-3712 be exploited remotely?
Yes, CVE-2018-3712 can be exploited by a malicious user remotely to access unauthorized directory contents.