Path Traversal Vulnerability in general-file-server Node Module Allows Unauthorized File Access

CVE-2018-3724 · MEDIUM Severity

AV:N/AC:L/AU:N/C:P/I:N/A:N

general-file-server node module suffers from a Path Traversal vulnerability due to lack of validation of currpath, which allows a malicious user to read content of any file with known path.

Learn more about our Cis Benchmark Audit For Server Software.