CVE-2018-3715: Glance Project Glance

Medium severity, CVSS 6.5. EPSS: 1.5% chance of exploitation in the next 30 days.

glance node module before 3.0.4 suffers from a Path Traversal vulnerability due to lack of validation of path passed to it, which allows a malicious user to read content of any file with known path.

Affected products

• Glance Project Glance: before 3.0.4 (fixed in 3.0.4)

Published 2018-06-07. Last modified 2026-06-17.