Path Traversal in html-pages · CVE-2018-3744 · GitHub Advisory Database · GitHub

Path Traversal in html-pages

Critical severity GitHub Reviewed Published Sep 18, 2018 to the GitHub Advisory Database • Updated Jan 31, 2023

Package

html-pages (npm)

Affected versions

<= 2.1.2

Patched versions

None

Description

Versions of html-pages before 2.1.0 are vulnerable to path traversal.

Recommendation

Update to version 2.1.0 or later.

References

Published by the National Vulnerability Database

May 29, 2018

Published to the GitHub Advisory Database Sep 18, 2018

Reviewed Jun 16, 2020

Last updated Jan 31, 2023

Severity

Critical

9.8

/ 10

CVSS base metrics

Attack vector

Network

Attack complexity

Low

Privileges required

None

User interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H