VYPR
← All advisories
High severity7.5NVD Advisory· Published Jun 7, 2018· Updated Jun 17, 2026

CVE-2018-3724

CVE-2018-3724

Description

general-file-server node module suffers from a Path Traversal vulnerability due to lack of validation of currpath, which allows a malicious user to read content of any file with known path.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
general-file-servernpm
<= 1.1.8—

Affected products

10
  • General File Server Project/General File Server8 versions
    cpe:2.3:a:general-file-server_project:general-file-server:1.0.0:*:*:*:*:node.js:*:*+ 7 more
    • cpe:2.3:a:general-file-server_project:general-file-server:1.0.0:*:*:*:*:node.js:*:*
    • cpe:2.3:a:general-file-server_project:general-file-server:1.1.2:*:*:*:*:node.js:*:*
    • cpe:2.3:a:general-file-server_project:general-file-server:1.1.3:*:*:*:*:node.js:*:*
    • cpe:2.3:a:general-file-server_project:general-file-server:1.1.4:*:*:*:*:node.js:*:*
    • cpe:2.3:a:general-file-server_project:general-file-server:1.1.5:*:*:*:*:node.js:*:*
    • cpe:2.3:a:general-file-server_project:general-file-server:1.1.6:*:*:*:*:node.js:*:*
    • cpe:2.3:a:general-file-server_project:general-file-server:1.1.7:*:*:*:*:node.js:*:*
    • cpe:2.3:a:general-file-server_project:general-file-server:1.1.8:*:*:*:*:node.js:*:*
  • ghsa-coords
    pkg:npm/general-file-server
    Range: <= 1.1.8
  • Hackerone/Crud File Server Node Modulecpe-rescue
    Range: All versions

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.