CVE-2018-3758CWE-22

Unrestricted file upload (RCE) in express-cart module before 1.1.7 allows a privileged user to gain access in the hosting machine

published June 7, 2018

CVSS

—

EPSS

27%

Percentile

98.0

In the wild

Unconfirmed

What it is

Unrestricted file upload (RCE) in express-cart module before 1.1.7 allows a privileged user to gain access in the hosting machine.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.27071 · 98.0th percentile
Weakness: CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published: 2018-06-07T21:00Z

EPSS history

Timeline

07 JUN 21:00Z
Unrestricted file upload (RCE) in express-cart module before 1.1.7 allows a privileged user to gain access in the hosting machine
cvelistv5