CVE-2017-16224
Last modified
CVE-2017-16224 is a vulnerability of currently unknown severity. st is a module for serving static files. An attacker is able to craft a request that results in an HTTP 301 (redirect) to an entirely different domain. EPSS estimates a 0.88% chance of exploitation in the next 30 days.
Description
st is a module for serving static files. An attacker is able to craft a request that results in an HTTP 301 (redirect) to an entirely different domain. A request for: http://some.server.com//nodesecurity.org/%2e%2e would result in a 301 to //nodesecurity.org/%2e%2e which most browsers treat as a proper redirect as // is translated into the current schema being used. Mitigating factor: In order for this to work, st must be serving from the root of a server (/) rather than the typical sub directory (/static/) and the redirect URL will end with some form of URL encoded .. ("%2e%2e", "%2e.", ".%2e").
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| St Project | St | <= 1.2.1 |
References
- https://nodesecurity.io/advisories/547Exploit, Third Party Advisory
- https://nodesecurity.io/advisories/547Exploit, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2017-16224?
How severe is CVE-2017-16224?
How do I fix CVE-2017-16224?
How Strix Helps
- One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2017
- CVE-2017-16219yttivy is a static file server. yttivy is vulnerable to a di…
- CVE-2017-1622IBM QRadar SIEM 7.2.8 and 7.3 does not validate, or incorrec…3.7
- CVE-2017-16220wind-mvc is an mvc framework. wind-mvc is vulnerable to a di…
- CVE-2017-16221yzt is a simple file server. yzt is vulnerable to a director…
- CVE-2017-16222elding is a simple web server. elding is vulnerable to a dir…
- CVE-2017-16223nodeaaaaa is a static file server. nodeaaaaa is vulnerable t…
- CVE-2017-16225aegir is a module to help automate JavaScript project manage…
- CVE-2017-16226The static-eval module is intended to evaluate statically-an…
- CVE-2017-16227The aspath_put function in bgpd/bgp_aspath.c in Quagga befor…
- CVE-2017-16228Dulwich before 0.18.5, when an SSH subprocess is used, allow…
- CVE-2017-16229In the Ox gem 2.8.1 for Ruby, the process crashes with a sta…
- CVE-2017-1623IBM QRadar 7.2 and 7.3 is vulnerable to cross-site scripting…
Are you affected by CVE-2017-16224?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST