What’s Vulnerable › Vulnerabilities

CVE-2018-3809

• Severity: medium (CVSS 5.3 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2018-06-01 · updated 2026-06-17
• Weakness: CWE-200

Description

Information exposure through directory listings in serve 6.5.3 allows directory listing and file access even when they have been set to be ignored.

Affected products

• serve: 6.5.3

References

• https://hackerone.com/reports/330650
• https://hackerone.com/reports/330650

Get alerted when CVE-2018-3809 or the next vulnerability affects your stack