CVE-2017-16222

2018-06-0702:00:00

CWE-22

hackerone

www.cve.org

EPSS

0.001

Percentile

40.4%

JSON

elding is a simple web server. elding is vulnerable to a directory traversal issue, allowing an attacker to access the filesystem by placing “…/” in the url. The files accessible, however, are limited to files with a file extension. Sending a GET request to /…/…/…/etc/passwd, for example, will return a 404 on etc/passwd/index.js.

CNA Affected

[
  {
    "product": "elding node module",
    "vendor": "HackerOne",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  }
]