CVEs-PoC/2018/CVE-2018-3731.md

CVE-2018-3731

Description

public node module suffers from a Path Traversal vulnerability due to lack of validation of filePath, which allows a malicious user to read content of any file with known path.

POC

Reference

• https://hackerone.com/reports/312918
• https://hackerone.com/reports/312918

Github

• https://github.com/ossf-cve-benchmark/CVE-2018-3731