CVE-2017-16159

CVE-2017-16159 affects the caolilinode Node.js package, where a directory traversal flaw allows an attacker to access the filesystem by manipulating URL paths (e.g., ../../). The root cause is improper handling of relative paths in the file-serving logic, enabling unauthorized disclosure of files...