QwikSec

Security Database

CVE

CWE

Training

CVE-2017-16109

Published: Jun 7, 2018

Modified: Sep 17, 2024

PUBLISHED

Description

easyquick is a simple web server. easyquick is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. Access is constrained, however, to supported file types. Requesting a file such as /etc/passwd returns a "not supported" error.

Vendor	Product	Versions
HackerOne	easyquick node module	affected `All versions`

Weaknesses (CWE)

References

https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/easyquick

x_refsource_MISC

https://nodesecurity.io/advisories/373

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.