← All advisories

Moderate severityNVD Advisory· Published Jun 7, 2018· Updated Sep 16, 2024

CVE-2018-3718

CVE-2018-3718

Description

serve node module suffers from Improper Handling of URL Encoding by permitting access to ignored files if a filename is URL encoded.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
servenpm	< 6.5.2	6.5.2

Affected products

2

ghsa-coords
pkg:npm/serve
Range: < 6.5.2
Hackerone/Sspa Node Modulecpe-rescue
Range: All versions

Patches

Vulnerability mechanics

References

3

github.com/advisories/GHSA-5rc4-8qqh-vq7fghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2018-3718ghsaADVISORY
hackerone.com/reports/308721ghsax_refsource_MISCWEB

News mentions

0

No linked articles in our index yet.