CVE-2017-16221 - AskarLabs CVE Database

CVE-2017-16221

Vendor Hackerone

Product yzt node module

Weakness CWE-22 · Path traversal

Published June 7, 2018

Last update September 17, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

yzt is a simple file server. yzt is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.

Key dates

02Disclosure timeline

June 7, 2018 CVE published

September 17, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2017-16221 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/22.html

Related vulnerabilities

04Related CVE

CVE-2025-66449 ConvertX has Path Traversal that leads to Arbitrary File Write and Arbitrary Code Execution CVE-2023-31179 AgilePoint NX v8.0 SU2.2 & SU2.3 - Path traversal CVE-2026-40086 Rembg has a Path Traversal via Custom Model Loading CVE-2025-47535 WordPress Opal Woo Custom Product Variation plugin <= 1.2.0 - Arbitrary File Deletion Vulnerability CVE-2023-45026 QTS, QuTS hero, QuTScloud