CVE-2017-16094 - AskarLabs CVE Database

CVE-2017-16094

Vendor Hackerone

Product iter-http node module

Weakness CWE-22 · Path traversal

Published June 7, 2018

Last update September 16, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

iter-http is a server for static files. iter-http is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.

Key dates

02Disclosure timeline

June 7, 2018 CVE published

September 16, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2017-16094 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/22.html

Related vulnerabilities

04Related CVE

CVE-2025-6108 hansonwang99 Spring-Boot-In-Action File Upload ImageUploadService.java watermarkTest path traversal CVE-2026-22762 CVE-2023-51640 Allegra extarctZippedFile Directory Traversal Remote Code Execution Vulnerability CVE-2024-5581 Allegra unzipFile Directory Traversal Remote Code Execution Vulnerability CVE-2026-42574 apko dirFS has a symlink-following path traversal that allows multiple entry points to escape the build root