CVE-2017-16172

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

section2.madisonjbrooks12 is a simple web server. section2.madisonjbrooks12 is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-22

Affected software

VendorProductVersions
HackerOnesection2.madisonjbrooks12 node moduleAll versions

References

Timeline

Published
Jun 7, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-161737.5utahcityfinder constructs lists of Utah cities with a certain prefix. utahcityfinder is vulnerable to a directory traversal issue, giving anCVE-2017-161747.5whispercast is a file server. whispercast is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placiCVE-2017-161757.5ewgaddis.lab6 is a file server. ewgaddis.lab6 is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by pCVE-2017-161767.5jansenstuffpleasework is a file server. jansenstuffpleasework is vulnerable to a directory traversal issue, giving an attacker access to theCVE-2017-161777.5chatbyvista is a file server. chatbyvista is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placiCVE-2017-161787.5intsol-package is a file server. intsol-package is vulnerable to a directory traversal issue, giving an attacker access to the filesystem byCVE-2017-161795.3dasafio is a web server. dasafio is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" CVE-2017-161807.5serverabc is a static file server. serverabc is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by plCVE-2017-161817.5wintiwebdev is a static file server. wintiwebdev is vulnerable to a directory traversal issue, giving an attacker access to the filesystem bCVE-2017-161827.5serverxxx is a static file server. serverxxx is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by plCVE-2017-161837.5iter-server is a static file server. iter-server is vulnerable to a directory traversal issue, giving an attacker access to the filesystem bCVE-2017-161847.5scott-blanch-weather-app is a sample Node.js app using Express 4. scott-blanch-weather-app is vulnerable to a directory traversal issue, giv
CVE-2017-16172: High severity, CVSS 7.5 | Vulnix