Skip to main content
← All vulnerabilities
CVE-2017-16162GHSA-RRFC-G2GH-XVJM

22lixian is a simple file server.

Published
Last modified
published
Not listed in CISA KEV
None on Exploit-DB, Metasploit or GitHub

Summary

22lixian is a simple file server. 22lixian is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.

Timeline

  1. CVE published
  2. Record last updated

Affected versions

  • HackerOne 22lixian node module

    All versions

  • 22lixiannpm

    through 1.0.0

References 2

nodesecurity.io

GitHub · JacksonGL/NPM-Vuln-PoC