PatchTheCVEmcstatic project vulnerabilities
Recent CVEs affecting mcstatic project products. 2 tracked.
mcstatic project has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2019-02-01. Highest priority: CVE-2018-3730 (score 56/100).
- CVE-2018-3730 HIGH 7.5 DOWNGRADE mcstatic node module suffers from a Path Traversal vulnerability due to lack of validation of filePath, which
- CVE-2018-16482 HIGH 7.5 UPGRADE A server directory traversal vulnerability was found on node module mcstatic <=0.0.20 that would allow an atta
FAQ
How do I fix mcstatic project vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is mcstatic project being exploited right now?
None of the tracked mcstatic project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which mcstatic project CVE should I patch first?
CVE-2018-3730 currently ranks highest (56/100): mcstatic node module suffers from a Path Traversal vulnerability due to lack of validation of filePath, which .