Skip to content
OpenAdvisories

Product · HackerOne

iter-http node module

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High —
    CVE-2017-16094

    Directory Traversal in iter-http

    iter-http is a server for static files. iter-http is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.

    HackerOne iter-http node module iter-http npm