CVE-2017-16223 - AskarLabs CVE Database

CVE-2017-16223

Vendor Hackerone

Product nodeaaaaa node module

Weakness CWE-22 · Path traversal

Published June 7, 2018

Last update September 17, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

nodeaaaaa is a static file server. nodeaaaaa is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.

Key dates

02Disclosure timeline

June 7, 2018 CVE published

September 17, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2017-16223 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/22.html

Related vulnerabilities

04Related CVE

CVE-2024-11952 Classic Addons – WPBakery Page Builder <= 3.0 - Authenticated (Contributor+) Limited Local PHP File Inclusion CVE-2025-52450 CVE-2025-23416 Keysight Ixia Vision Product Family Path Traversal CVE-2026-45454 Microsoft SharePoint Remote Code Execution Vulnerability CVE-2023-49569 Maliciously crafted Git server replies can lead to path traversal and RCE on go-git clients