The public node module versions <= 1.0.3 allows to embed HTML in file names, which (in certain conditions) might lead to execute malicious JavaScript.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://hackerone.com/reports/316346 |
History
No history.
MITRE
Status: PUBLISHED
Assigner: hackerone
Published: 2018-07-03T21:00:00Z
Updated: 2024-09-17T02:02:42.963Z
Reserved: 2017-12-28T00:00:00
Link: CVE-2018-3747
Vulnrichment
No data.
NVD
Status : Modified
Published: 2018-07-03T21:29:00.417
Modified: 2024-11-21T04:05:59.967
Link: CVE-2018-3747
Redhat
No data.