CVE-2017-16145

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

sspa is a server dedicated to single-page apps. sspa is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-22

Affected software

No affected versions have been published.

Timeline

Published
Jun 7, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-161467.5mockserve is a file server. mockserve is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "CVE-2017-161477.5shit-server is a file server. shit-server is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placiCVE-2017-161487.5serve46 is a static file server. serve46 is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placinCVE-2017-161497.5zwserver is a weather web server. zwserver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placCVE-2017-161507.5wanggoujing123 is a simple webserver. wanggoujing123 is vulnerable to a directory traversal issue, giving an attacker access to the filesystCVE-2017-161519.8Based on details posted by the ElectronJS team; A remote code execution vulnerability has been discovered in Google Chromium that affects alCVE-2017-161527.5static-html-server is a static file server. static-html-server is vulnerable to a directory traversal issue, giving an attacker access to thCVE-2017-161537.5gaoxuyan is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.CVE-2017-161547.5earlybird is a web server module for early development. earlybird is vulnerable to a directory traversal issue, giving an attacker access toCVE-2017-161557.5fast-http-cli is the command line interface for fast-http, a simple web server. fast-http-cli is vulnerable to a directory traversal issue, CVE-2017-161567.5myprolyz is a static file server. myprolyz is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placCVE-2017-161577.5censorify.tanisjr is a simple web server and API RESTful service. censorify.tanisjr is vulnerable to a directory traversal issue, giving an
CVE-2017-16145: High severity, CVSS 7.5 | Vulnix