CVE-2018-3716

simplehttpserver node module suffers from a Cross-Site Scripting vulnerability to a lack of validation of file names.

Date published : 2018-06-06

https://hackerone.com/reports/309648