CVE-2017-16157

HIGH

censorify.tanisjr - Path Traversal via URL Manipulation

Title source: llm

Description

censorify.tanisjr is a simple web server and API RESTful service. censorify.tanisjr is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.

References (2)

Core 2

Core References

Exploit, Third Party Advisory x_refsource_misc

https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/censorify.tanisjr

Third Party Advisory x_refsource_misc

https://nodesecurity.io/advisories/392

Scores

CVSS v3 7.5

EPSS 0.0200

EPSS Percentile 78.4%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE

CWE-22

Status published

Products (4)

censorify.tanisjr_project/censorify.tanisjr 0.1.2

censorify.tanisjr_project/censorify.tanisjr 0.1.3

censorify.tanisjr_project/censorify.tanisjr 0.1.4

npm/censorify.tanisjr 0npm

Published Jun 07, 2018

Tracked Since Feb 18, 2026