CVE-2017-16029
CVE-2017-16029
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 1.8%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
04 Jun 2018Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
hostr is a simple web server that serves up the contents of the current directory. There is a directory traversal vulnerability in hostr 2.3.5 and earlier that allows an attacker to read files outside the current directory by sending `../` in the url path for GET requests.
Affected products
HackerOne · hostr node moduleWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →