CVE-2017-16211

CVE-2017-16211 concerns the static file server lessindex , which is vulnerable to a directory traversal vulnerability. The underlying issue is that the server resolves relative file paths, allowing an attacker to access the filesystem by injecting sequences like "../" in the URL. This can disclos...