Skip to main content
← All vulnerabilities
CVE-2017-16141GHSA-7PGQ-HHQ9-9R27

lab6drewfusbyu is an http server.

Published
Last modified
published
Not listed in CISA KEV
None on Exploit-DB, Metasploit or GitHub

Summary

lab6drewfusbyu is an http server. lab6drewfusbyu is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.

Timeline

  1. CVE published
  2. Record last updated

Affected versions

  • HackerOne lab6drewfusbyu node module

    All versions

  • lab6drewfusbyunpm

    through 0.1.1

References 2

nodesecurity.io

GitHub · JacksonGL/NPM-Vuln-PoC