VULNERABILITY INTELLIGENCE

CVE-2018-3730

CVSS score7.5 HIGH

EPSS probability2.01%

CISA KEVNot currently listed

Published2018-06-07

Last modified2026-06-17

Description

mcstatic node module suffers from a Path Traversal vulnerability due to lack of validation of filePath, which allows a malicious user to read content of any file with known path.