Skip to main content
← All vulnerabilities
CVE-2017-16160GHSA-X2JJ-X3Q2-7HPH

11xiaoli is a simple file server.

Published
Last modified
published
Not listed in CISA KEV
None on Exploit-DB, Metasploit or GitHub

Summary

11xiaoli is a simple file server. 11xiaoli is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.

Timeline

  1. CVE published
  2. Record last updated

Affected versions

  • HackerOne 11xiaoli node module

    All versions

  • 11xiaolinpm

    From 0.0.0

References 2

nodesecurity.io

GitHub · JacksonGL/NPM-Vuln-PoC