Skip to content
OpenAdvisories
High · 7.5 CVE-2017-16198 EUVD-2018-0399GHSA-gf7h-vg5v-cch6

Directory Traversal in ritp

Published Jun 7, 2018 · Updated Aug 5, 2024 · Assigned by hackerone

Description

ritp is a static web server. ritp is vulnerable to a directory traversal issue whereby an attacker can gain access to the file system by placing ../ in the URL. Access is restricted to files with a file extension, so files such as /etc/passwd are not accessible.

Affected packages

EcosystemPackageAffectedFixedRecord
npm ritp <= 1.0.5 — GHSA-gf7h-vg5v-cch6

References