Approved changes feed: RSS · Atom

cpe:2.3:a:hostr_project:hostr:*:*:*:*:*:node.js:*:*

part: a version: * update: *

VendorHostr Project (3aae9ad2-65d3-54d7-b073-2bbc85f975b2)
ProductHostr (83cb5c0f-c8c5-5296-b0b0-8dd1bb5abdc6)
Edition*
Language*
Software edition*
Target softwarenode.js
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-16029 vulnerable 2026-06-08 05:08:59.896505 Details available
hostr is a simple web server that serves up the contents of the current directory. There is a directory traversal vulnerability in hostr 2.3.5 and earlier that allows an attacker to read files outside the current directory by sending `../` in the url path for GET requests.
Published: 2018-06-04T19:00:00.000Z
Updated: 2024-09-17T00:11:57.294Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.