Security Advisory

CVE-2017-16198

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2018-06-07 02:00:00
Last updated 2024-08-05 20:20:04
Assigner hackerone
State PUBLISHED

Description

ritp is a static web server. ritp is vulnerable to a directory traversal issue whereby an attacker can gain access to the file system by placing ../ in the URL. Access is restricted to files with a file extension, so files such as /etc/passwd are not accessible.