elding Project elding 1.0.0 for Node.js

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:elding_project:elding:1.0.0:*:*:*:*:node.js:*:*

part: a version: 1.0.0 update: *

VendorElding Project (d7e48221-ab18-595b-ad92-1b5d92802e73)
ProductElding (04a4ba9c-7810-5dad-ad0f-e22099671d68)
Edition*
Language*
Software edition*
Target softwarenode.js
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:gitlab/jacksarick/elding purl2cpe 2026-06-01 10:16:09.668414
pkg:npm/elding purl2cpe 2026-06-01 10:16:09.668417

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-16222 vulnerable 2026-06-08 05:09:00.255272 Details available
elding is a simple web server. elding is vulnerable to a directory traversal issue, allowing an attacker to access the filesystem by placing "../" in the url. The files accessible, however, are limited to files with a file extension. Sending a GET request to /../../../etc/passwd, for example, will return a 404 on etc/passwd/index.js.
Published: 2018-06-07T02:00:00.000Z
Updated: 2024-09-17T03:44:17.687Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.