CVE-2017-16225 - AskarLabs CVE Database

CVE-2017-16225

Vendor Hackerone

Product aegir node module

Weakness CWE-200 · Info exposure

Published June 7, 2018

Last update September 16, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

aegir is a module to help automate JavaScript project management. Version 12.0.0 through and including 12.0.7 bundled and published to npm the user (that performed a aegir-release) GitHub token.

Key dates

02Disclosure timeline

June 7, 2018 CVE published

September 16, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2017-16225 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/200.html

Related vulnerabilities

04Related CVE

CVE-2023-29517 Exposure of Sensitive Information to an Unauthorized Actor in org.xwiki.platform:xwiki-platform-office-viewer CVE-2025-62400 Moodle: hidden group names visible to event creators CVE-2026-29787 mcp-memory-service: System Information Disclosure via Health Endpoint CVE-2025-5436 Multilaser Sirius RE016 cstecgi.cgi information disclosure CVE-2024-1139 Cluster-monitoring-operator: credentials leak