Skip to content
OpenAdvisories

Product · HackerOne

f2e-server node module

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2017-16038

    Directory Traversal in f2e-server

    `f2e-server` 1.12.11 and earlier is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. This is compounded by `f2e-server` requiring elevated privileges to run.

    HackerOne f2e-server node module f2e-server npm