CVE-2018-3733: Crud-File-Server Project Crud-File-Server

High severity, CVSS 7.5. EPSS: 2.2% chance of exploitation in the next 30 days.

crud-file-server node module before 0.9.0 suffers from a Path Traversal vulnerability due to incorrect validation of url, which allows a malicious user to read content of any file with known path.

Affected products

• Crud-File-Server Project Crud-File-Server: before 0.9.0 (fixed in 0.9.0)

Published 2018-05-29. Last modified 2026-06-17.