high7.5
CVE-2017-16198
ritp is a static web server.
Impact
ritp is a static web server. ritp is vulnerable to a directory traversal issue whereby an attacker can gain access to the file system by placing ../ in the URL. Access is restricted to files with a file extension, so files such as /etc/passwd are not accessible.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ritp Project | Ritp | Versions 1.0.2, 1.0.3, 1.0.4, 1.0.5 |