What is CVE-2018-3713?

CVE-2018-3713 is a medium-severity vulnerability in Angular-Http-Server Project, classified under Path Traversal. CVSS score: 6.5/10. Published 2018-06-07.

How severe is CVE-2018-3713?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Is CVE-2018-3713 known to be exploited?

2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Path Traversal in Angular-Http-Server Project

CVE-2018-3713

angular-http-server node module suffers from a Path Traversal vulnerability due to lack of validation of possibleFilename, which allows a malicious user to read content of any file with known path.

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.015 (71.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.

Affected products

Angular-http-server_project Angular-http-server
Hackerone Angular-http-server Node Module — versions All versions

Weakness classification (CWE)

CWE-22 — Path Traversal

Public proof-of-concept exploits

References

support@hackerone.com (Exploit, Third Party Advisory, x_refsource_MISC, Issue Tracking)

Frequently asked questions

What is CVE-2018-3713?: CVE-2018-3713 is a medium-severity vulnerability in Angular-Http-Server Project, classified under Path Traversal. CVSS score: 6.5/10. Published 2018-06-07.
How severe is CVE-2018-3713?: Medium severity. CVSS v3 base score is 6.5 out of 10.
Is CVE-2018-3713 known to be exploited?: 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.