CVE-2017-1000170 - jqueryFileTree 2.1.5 and older Directory Traversal

HIGH

jqueryFileTree 2.1.5 and older Directory Traversal

Published Nov 17, 2017

7.5

HIGH

CVSS 3.1

EPSS 59.06%

jqueryFileTree 2.1.5 and older Directory Traversal

Ecosystem	Package	Introduced	Fixed
npm	jqueryfiletree	0	not fixed

No remediation recorded yet.

Weaknesses (1)

CWE-22

Path Traversal

Link	Providers	Tags
http://packetstormsecurity.com/files/161900/WordPress-Delightful-Downloads-Jquery-File-Tree-1.6.6-Path-Traversal.html		x_refsource_MISCExploitThird Party AdvisoryVDB Entry
https://github.com/advisories/GHSA-p739-9479-5wr2		Advisory
https://github.com/jqueryfiletree/jqueryfiletree/issues/66		x_refsource_MISCExploitPatchThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-1000170