CVE-2017-16211

lessindex is a static file server. lessindex is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.

• CWE-22
• CWE-22

• https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/lessindexExploit, Third Party Advisory
• https://nodesecurity.io/advisories/423Third Party Advisory
• https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/lessindexExploit, Third Party Advisory
• https://nodesecurity.io/advisories/423Third Party Advisory

Published

Jun 7, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-16206The cofee-script module exfiltrates sensitive data such as a…
• CVE-2017-16207discordi.js is a malicious module based on the discord.js li…
• CVE-2017-16208dmmcquay.lab6 is a REST server. dmmcquay.lab6 is vulnerable …
• CVE-2017-16209enserver is a simple web server. enserver is vulnerable to a…
• CVE-2017-1621IBM Rational Quality Manager and IBM Rational Collaborative …5.4
• CVE-2017-16210jn_jj_server is a static file server. jn_jj_server is vulner…
• CVE-2017-16212ltt is a static file server. ltt is vulnerable to a director…
• CVE-2017-16213mfrserver is a simple file server. mfrserver is vulnerable t…
• CVE-2017-16214peiserver is a static file server. peiserver is vulnerable t…
• CVE-2017-16215sgqserve is a simple file server. sgqserve is vulnerable to …
• CVE-2017-16216tencent-server is a simple web server. tencent-server is vul…
• CVE-2017-16217fbr-client sends files through sockets via socket.io and web…