CVE-2017-16121

Vulnerability

datachannel-client is a signaling implementation for DataChannel.js. Versions <= 1.0.2 are vulnerable to directory traversal. By injecting ../ sequences into the URL path, an attacker can escape the intended root directory and access arbitrary files on the filesystem [1][2][3].

Exploitation

An attacker can exploit this vulnerability by sending crafted HTTP requests to the server with path segments like ../ to traverse directories. No authentication is required, and the attack is performed over the network [2].

Impact

Successful exploitation allows an attacker to read arbitrary files from the server's filesystem, potentially exposing sensitive information such as configuration files, source code, or credentials [1][3].

Mitigation

No official fix has been released for this vulnerability as of the publication date. The package appears to be unmaintained. Users should avoid using datachannel-client in production or replace it with an alternative that addresses directory traversal [3].