Description (CNA)
crud-file-server node module before 0.8.0 suffers from a Cross-Site Scripting vulnerability to a lack of validation of file names.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| HackerOne / crud-file-server node module | affected Versions before 0.8.0 |
CWE
CWE-79
References
- https://hackerone.com/reports/311101
- https://github.com/omphalos/crud-file-server/commit/4155bfe068bf211b49a0b3ffd06e78cbaf1b40fa
ADP enrichment
No English description supplied.