CVE-2017-16222CWE-22

elding is a simple web server

published June 7, 2018

CVSS
—
EPSS
2%
Percentile
76.6
In the wild
Unconfirmed
What it is

elding is a simple web server. elding is vulnerable to a directory traversal issue, allowing an attacker to access the filesystem by placing "../" in the url. The files accessible, however, are limited to files with a file extension. Sending a GET request to /../../../etc/passwd, for example, will return a 404 on etc/passwd/index.js.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01677 · 76.6th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2018-06-07T02:00Z
EPSS history
Timeline
  • 07 JUN 02:00Z
    elding is a simple web server
    cvelistv5