CVE-2017-16147

The CVE-2017-16147 entry applies to the npm package shit-server, a file server affected by a directory traversal vulnerability. According to the sources, providing URLs containing traversal sequences (e.g., ../ or multiple ../) allows an attacker to access files outside the intended directory roo...