npm/crud-file-server CVE-2018-3726: medium 6.1, EPSS 1.06%
Cross-site Scripting (XSS) - Stored in crud-file-server
Action: Upgrade crud-file-server to 0.8.0 or later.
npm i crud-file-server@0.8.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.8.0 | - |
Fixed versions
| 0.8.0 |
Sources
- osv: GHSA-h24f-9mm4-w336
- https://nvd.nist.gov/vuln/detail/CVE-2018-3726
- https://github.com/omphalos/crud-file-server/commit/4155bfe068bf211b49a0b3ffd06e78cbaf1b40fa
- https://hackerone.com/reports/311101
- https://github.com/advisories/GHSA-h24f-9mm4-w336
- https://www.npmjs.com/advisories/570
CVE-2018-3726 · published · modified · JSON