CVE-2017-16090

fsk-server is a simple http server. fsk-server is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16090

CVE-2017-16090 affects the Node.js fsk-server, which is vulnerable to a directory traversal issue in its HTTP server. An attacker can access the filesystem by placing "."/"" in the URL (e.g., requests like /../../../../../../../../../../etc/passwd). The vulnerability leads to potential disclosure...