ZeroHour

CVE-2017-16198

PoC
CVSS 3.0
7.5 high
EPSS
2%p80
Published
()
Modified
Description

ritp is a static web server. ritp is vulnerable to a directory traversal issue whereby an attacker can gain access to the file system by placing ../ in the URL. Access is restricted to files with a file extension, so files such as /etc/passwd are not accessible.

Vendors
ritp project
Products
ritp
Weakness
CWE-22
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

In the news

No ingested article mentions this CVE yet.