CVE-2017-16141 Vulnerability in npm package lab6drewfusbyu

Description

lab6drewfusbyu is an http server. lab6drewfusbyu is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.

Remediation

References

https://nodesecurity.io/advisories/474

https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/lab6drewfusbyu

Related Vulnerabilities

CVE-2020-14326 Vulnerability in maven package org.jboss.resteasy:resteasy-core

CVE-2021-32641 Vulnerability in npm package auth0-lock

CVE-2022-39396 Vulnerability in npm package parse-server

CVE-2019-10750 Vulnerability in npm package deeply

CVE-2016-6796 Vulnerability in maven package tomcat:jasper

Severity

High

Classification

CWE-22 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N