[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2017-16170":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":10,"cwes":11,"cpes":13,"technologies":16,"references":19,"score":24,"epss_score":25,"epss_percentile":26,"is_kev":10,"cisa_kev_date_added":27,"cisa_kev_due_date":27,"cisa_ssvc":28,"attack_mappings":34,"exploits":35},212774,"CVE-2017-16170","EUVD-2020-1389","Directory Traversal in liuyaserver\n\nAffected versions of `liuyaserver` resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system.\n\n**Example request:**\n```http\nGET \u002F..\u002F..\u002F..\u002F..\u002F..\u002F..\u002F..\u002F..\u002F..\u002F..\u002Fetc\u002Fpasswd HTTP\u002F1.1\nhost:foo\n```\n\n\n## Recommendation\n\nNo patch is available for this vulnerability.\n\nIt is recommended that the package is only used for local development, and if the functionality is needed for production, a different package is used instead.","2020-09-01T17:34:00Z",{},false,[12],"CWE-22",[14,15],"cpe:2.3:a:liuyaserver_project:liuyaserver:1.0.0:*:*:*:*:node.js:*:*","cpe:2.3:a:liuyaserver:liuyaserver:*:*:*:*:*:*:*:*",[17,18],"Liuyaserver_Project Liuyaserver","Liuyaserver Liuyaserver",[20,21,22,23],"https:\u002F\u002Fgithub.com\u002FJacksonGL\u002FNPM-Vuln-PoC\u002Fblob\u002Fmaster\u002Fdirectory-traversal\u002Fliuyaserver","https:\u002F\u002Fnodesecurity.io\u002Fadvisories\u002F413","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2017-16170","https:\u002F\u002Fwww.npmjs.com\u002Fadvisories\u002F413",0,0.01974,0.80343,null,{"timestamp":27,"automatable":29,"tech_impact":30,"exploitation":31,"cisa_decision":32,"cisa_remediation_timeline":33},"no","partial","none",{},"FSU",[],[36],{"link":20}]