Crud-File-Server Project Crud-File-Server
2 CVEs affecting Crud-File-Server Project Crud-File-Server. Latest disclosed: 2018-06-07. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-3733 | High | 7.5 | 2018-05-29 | crud-file-server node module before 0.9.0 suffers from a Path Traversal vulnerability due to incorrect validation of url, which allows a malicious user to read… |
CVE-2018-3726 | Medium | 6.1 | 2018-06-07 | crud-file-server node module before 0.8.0 suffers from a Cross-Site Scripting vulnerability to a lack of validation of file names. |