Vulnerabilities

CVE-2018-3718 | BDVDB-2026-102003 Detail

HackerOneserve node module

Description#

serve node module suffers from Improper Handling of URL Encoding by permitting access to ignored files if a filename is URL encoded.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-177 Improper Handling of URL Encoding (Hex Encoding) (CWE-177)

References#

https://hackerone.com/reports/308721

Exploit#

No public exploit known

History#

Version 12018-06-07Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.