CVE-2018-3809 - Information exposure through directory listings in serve 6.5.3 allows directory listing and file access even when they have been set to be ignored

MEDIUM

Information exposure through directory listings in serve 6.5.3 allows directory listing and file access even when they have been set to be ignored

Published Jun 1, 2018

5.3

MEDIUM

CVSS 3.0

EPSS 1.05%

Information exposure through directory listings in serve 6.5.3 allows directory listing and file access even when they have been set to be ignored.

Ecosystem	Package	Introduced	Fixed
npm	serve	0	7.0.0

No remediation recorded yet.

Weaknesses (1)

CWE-200

Exposure of Sensitive Information

Link	Providers	Tags
https://github.com/advisories/GHSA-686g-3xr3-x4x6		Advisory
https://hackerone.com/reports/330650		x_refsource_MISCExploitThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-3809
https://www.npmjs.com/advisories/672

No recorded changes yet.

Sources

Status PUBLISHED

Assigner hackerone

Published Jun 1, 2018

Updated Sep 17, 2024

Reserved Dec 28, 2017

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a

Assigner n/a

Published n/a

Updated n/a

Exploited since n/a

Link n/a