Lucene search
+L

3 matches found

CNVD
CNVD
added 2018/06/20 12:0 a.m.5 views

rtcmulticonnection-client path traversal vulnerability

rtcmulticonnection-client is a signaling implementation of RTCMultiConnection.js based on Node.js and Scoket.io. A path traversal vulnerability exists in rtcmulticonnection-client. An attacker can exploit this vulnerability by placing a '... /' sequence in a URL to gain access to the file system...

7.5CVSS7.6AI score0.02005EPSS
SaveExploits1References1
OSV
OSV
added 2018/06/07 2:29 a.m.8 views

CVE-2017-16125

rtcmulticonnection-client is a signaling implementation for RTCMultiConnection.js, a multi-session manager. rtcmulticonnection-client is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

7.5CVSS5.8AI score0.02005EPSS
SaveExploits1References2
CVE
CVE
added 2018/06/07 2:0 a.m.58 views

CVE-2017-16125

rtcmulticonnection-client is vulnerable to directory traversal via URLs containing ../../.. sequences, enabling access to files outside the intended directory. This vulnerability is documented across CVE-2017-16125 entries and related advisories (GHSA, OSV, CNVD, CNVD variants). The root cause is...

7.5CVSS7.4AI score0.02005EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder