CVE:CVE-2018-3730
CNNVD:CNNVD-201806-412
mcstatic node module是一款静态服务器。
mcstatic node module中存在路径遍历漏洞，该漏洞源于程序缺少对文件路径的检测。攻击者可利用该漏洞读取任意文件的内容。
solution:Upgrade mcstatic_project mcstatic to a higher version than 0.0.20,and avoid the version 0.0.20