← Voltar para CVEs
CVE-2017-16223
N/ADescricao
nodeaaaaa is a static file server. nodeaaaaa is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
Detalhes CVE
Pontuacao CVSS v3.1N/A
Publicado6/7/2018
Ultima modificacao11/21/2024
Fontenvd
Avistamentos honeypot0
Produtos afetados
nodeaaaaa_project:nodeaaaaa
Fraquezas (CWE)
CWE-22CWE-22
Referencias
https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/nodeaaaaa(support@hackerone.com)
https://nodesecurity.io/advisories/446(support@hackerone.com)
https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/nodeaaaaa(af854a3a-2127-422b-91ae-364da2661108)
https://nodesecurity.io/advisories/446(af854a3a-2127-422b-91ae-364da2661108)
Correlacoes IOC
Sem correlacoes registradas
This product uses data from the NVD API but is not endorsed or certified by the NVD.