cve/2017/CVE-2017-16083.md

CVE-2017-16083

Description

node-simple-router is a minimalistic router for Node. node-simple-router is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL.

POC

Reference

• https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/node-simple-router

Github

• https://github.com/ossf-cve-benchmark/CVE-2017-16083