CVE-2018-3729CWE-22

CVE-2018-3729: vulnerability in HackerOne localhost-now node module

Published · Updated

Follow this CVE+ Monitor localhost-now node module+ Monitor localhost-now

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 2.0%
localhost-now node module suffers from a Path Traversal vulnerability due to lack of validation of file, which allows a malicious user to read content of any file with known path.
Affected products
HackerOne · localhost-now node module