CVE-2017-16089

serverlyr is a simple http server. serverlyr is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL...

CVE-2017-16089

CVE-2017-16089 affects the lightweight HTTP server serverlyr and describes a directory traversal vulnerability. The issue is triggered when an attacker uses URL paths containing sequences like “../” (or multiple variants) to access files outside the intended directory, potentially exposing sensit...