Security Advisory

CVE-2018-3747

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2018-07-03 21:00:00
Last updated 2024-09-17 02:02:42
Assigner hackerone
State PUBLISHED

Description

The public node module versions <= 1.0.3 allows to embed HTML in file names, which (in certain conditions) might lead to execute malicious JavaScript.