Medium severity6.1NVD Advisory· Published Jun 4, 2018· Updated Jun 17, 2026

CVE-2017-16018

Description

Restify is a framework for building REST APIs. Restify >=2.0.0 <=4.0.4 using URL encoded script tags in a non-existent URL, an attacker can get script to run in some browsers.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
restifynpm	>= 2.0.0, < 4.1.0	4.1.0

Affected products

Restify/Restify
cpe:2.3:a:restify:restify:*:*:*:*:*:node.js:*:*
Range: >=2.0.0,<=4.0.4
ghsa-coords
pkg:npm/restify
Range: >= 2.0.0, < 4.1.0
HackerOne/restify node modulev5
Range: >=2.0.0 <=4.0.4

Patches

Vulnerability mechanics

References

github.com/restify/node-restify/issues/1018nvdExploitIssue TrackingThird Party AdvisoryWEB
nodesecurity.io/advisories/314nvdExploitThird Party Advisory
github.com/advisories/GHSA-qw3g-35hc-fcrhghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2017-16018ghsaADVISORY
www.npmjs.com/advisories/314ghsaWEB

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000