CVE-2018-16493: vulnerability in HackerOne static-resource-server
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 1.8%
A path traversal vulnerability was found in module static-resource-server 1.7.2 that allows unauthorized read access to any file on the server by appending slashes in the URL.
Affected products
HackerOne · static-resource-serverReferences
https://hackerone.com/reports/432600