CVE-2017-16216

CVE-2017-16216 involves a directory traversal flaw in the simple web server tencent-server . The root cause is improper handling of relative paths in URLs (e.g., using "../"), which can let an attacker access files outside the document root. Impact described across sources is potential disclosure...