QwikSec

Security Database

CVE

CWE

Training

CVE-2017-16130

Published: Jun 7, 2018

Modified: Sep 17, 2024

PUBLISHED

Description

exxxxxxxxxxx is an Http eX Frame Google Style JavaScript Guide. exxxxxxxxxxx is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. Accessible files are restricted to those with a file extension. Files with no extension such as /etc/passwd throw an error.

Vendor	Product	Versions
HackerOne	exxxxxxxxxxx node module	affected `All versions`

Weaknesses (CWE)

References

https://nodesecurity.io/advisories/478

x_refsource_MISC

https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/exxxxxxxxxxx

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.