CVE-2017-16179

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

dasafio is a web server. dasafio is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. File access is restricted to only .html files.

Metrics

CVSS 3.0 5.3/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-22

Affected software

VendorProductVersions
HackerOnedasafio node moduleAll versions

References

Timeline

Published
Jun 7, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-161807.5serverabc is a static file server. serverabc is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by plCVE-2017-161817.5wintiwebdev is a static file server. wintiwebdev is vulnerable to a directory traversal issue, giving an attacker access to the filesystem bCVE-2017-161827.5serverxxx is a static file server. serverxxx is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by plCVE-2017-161837.5iter-server is a static file server. iter-server is vulnerable to a directory traversal issue, giving an attacker access to the filesystem bCVE-2017-161847.5scott-blanch-weather-app is a sample Node.js app using Express 4. scott-blanch-weather-app is vulnerable to a directory traversal issue, givCVE-2017-161857.5uekw1511server is a static file server. uekw1511server is vulnerable to a directory traversal issue, giving an attacker access to the filesyCVE-2017-161867.5360class.jansenhm is a static file server. 360class.jansenhm is vulnerable to a directory traversal issue, giving an attacker access to the CVE-2017-161877.5open-device creates a web interface for any device. open-device is vulnerable to a directory traversal issue, giving an attacker access to tCVE-2017-161887.5reecerver is a web server. reecerver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing ".CVE-2017-161897.5sly07 is an API for censoring text. sly07 is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placiCVE-2017-161907.5dcdcdcdcdc is a static file server. dcdcdcdcdc is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by CVE-2017-161917.5cypserver is a static file server. cypserver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by pl
CVE-2017-16179: Medium severity, CVSS 5.3 | Vulnix