CVE-2018-3717CWE-79

CVE-2018-3717: vulnerability in HackerOne connect node module

Published · Updated

Follow this CVE+ Monitor connect node module+ Monitor connect

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.3%
connect node module before 2.14.0 suffers from a Cross-Site Scripting (XSS) vulnerability due to a lack of validation of file in directory.js middleware.
Affected products
HackerOne · connect node module