CVE-2017-16186

Vulnerability

The 360class.jansenhm package is a static file server for Node.js. It is vulnerable to a directory traversal attack. By including ../ sequences in the URL, an attacker can escape the intended web root directory and access arbitrary files on the server's filesystem. The vulnerability exists in all versions of the package, as no specific version range is provided in the available references [1].

Exploitation

An attacker can exploit this vulnerability by sending an HTTP request to the server with a crafted URL containing ../ path traversal sequences. No authentication or special privileges are required. For example, requesting http://target/../etc/passwd would retrieve the system's password file. The GitHub proof-of-concept repository demonstrates the attack [2].

Impact

Successful exploitation allows an attacker to read any file on the server's filesystem that the server process has access to. This leads to information disclosure of sensitive data such as configuration files, source code, or system files. The attacker gains no write or execute capabilities, but the confidentiality impact is high.

Mitigation

As of the publication date (2018-06-07), no patched version of 360class.jansenhm has been released. The package appears to be unmaintained. The recommended mitigation is to remove the package from the project and replace it with a secure alternative static file server. No workaround is available.