CVE-2017-1000170

jqueryFileTree 2.1.5 and older Directory Traversal

CVSS v3.1

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS v3.1

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

59.06% chance of exploitation in the next 30 days, 99th percentile

Nuclei

high · CWE-22

Published

2017-11-17

Updated

2024-08-05

Proof-of-concept exploits (4)

• http://packetstormsecurity.com/files/161900/WordPress-Delightful-Downloads-Jquery-File-Tr…
• jqueryfiletree/jqueryfiletree/issues/66
• advisories/GHSA-p739-9479-5wr2
• Nickguitar/Jquery-File-Tree-1.6.6-Path-Traversal4★ · 2021-05-04

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-1000170.yaml

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/49693

References

• CVE Record
• NVD entry

Related

• CVE-2018-17254
• CVE-2021-4034
• CVE-2023-1112
• CVE-2017-1000163
• CVE-2017-1000172
• CVE-2017-1000147