Improper Handling of URL Encoding Vulnerability in serve Node Module by The Node.js Foundation

CVE-2018-3718

What is CVE-2018-3718?

The serve node module, utilized for serving static files, is susceptible to improper handling of URL encoding. This vulnerability allows attackers to gain unauthorized access to files that should be ignored if a filename is URL encoded. When attacking, the attacker can exploit the module's vulnerabilities, potentially revealing sensitive information contained in hidden files, leading to unauthorized data exposure.

References