CVE-2018-3744

The html-pages node module contains a path traversal vulnerabilities that allows an attacker to read any file from the server with cURL.

The html-pages node module contains a path traversal vulnerabilities that allows an attacker to read any file from the server with cURL.

Versions of `html-pages` before 2.1.0 are vulnerable to path traversal. ## Recommendation Update to version 2.1.0 or later.

Versions of `html-pages` before 2.1.0 are vulnerable to path traversal. ## Recommendation Update to version 2.1.0 or later.

El módulo html-pages contiene vulnerabilidades de salto de directorio que permiten que un atacante lea cualquier archivo del servidor con cURL.