MidnightBSD

Advisories for sspa_project

CVE-2017-16145 MEDIUM

sspa is a server dedicated to single-page apps. sspa is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.

CVSS 2.0

Severity: MEDIUM

Problem Type: CWE-22,CWE-22,

Products Affected

Vendor Product Version
sspa_project sspa 0.1.0