Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2018-3716

simplehttpserver node module suffers from a Cross-Site Scripting vulnerability to a lack of validation of file names.

Description

simplehttpserver node module suffers from a Cross-Site Scripting vulnerability to a lack of validation of file names.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HackerOne simplehttpserver node module

  • All versionsaffected

References