Security Advisory
CVE-2018-3717
5.4
MEDIUM
Vulnerability Description
connect node module before 2.14.0 suffers from a Cross-Site Scripting (XSS) vulnerability due to a lack of validation of file in directory.js middleware.
Published Date
June 7, 2018
Official Source
NIST NVD Advisory