What is GHSA-3r8f-gphx-9m2c?

GHSA-3r8f-gphx-9m2c is a security advisory published by GitHub Security Advisories with High severity. Path Traversal in mcstatic

Which CVE IDs does GHSA-3r8f-gphx-9m2c cover?

GHSA-3r8f-gphx-9m2c covers the following CVE IDs: CVE-2018-3730. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-3r8f-gphx-9m2c?

GHSA-3r8f-gphx-9m2c has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

Which products are affected by GHSA-3r8f-gphx-9m2c?

GHSA-3r8f-gphx-9m2c affects 1 product, including: npm/mcstatic:\u003c= 0.0.20.

GHSA-3r8f-gphx-9m2cHighCVSS 7.5

Path Traversal in mcstatic

Vendor

GitHub Security Advisories

Published

July 27, 2018

Last Modified

January 31, 2023

🔗 CVE IDs covered (1)

CVE-2018-3730 →

📋 Description

All versions of mcstatic are vulnerable to path traversal.

Recommendation

No fix is currently available for this vulnerability. It is our recommendation to not install or use this module at this time.

🎯 Affected products1

npm/mcstatic:<= 0.0.20

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2018-3730
https://hackerone.com/reports/312907
https://github.com/advisories/GHSA-3r8f-gphx-9m2c
https://www.npmjs.com/advisories/641