CVE:CVE-2017-16155
CNNVD:CNNVD-201806-483
fast-http-cli是一款基于命令行的HTTP服务器。
fast-http-cli中存在目录遍历漏洞。攻击者可通过在URL中放置‘../’序列利用该漏洞获取文件系统的访问权限。
solution:Upgrade fast-http-cli_project fast-http-cli to a higher version than 0.0.1,0.0.2,0.0.3,0.0.4,0.0.5,0.0.6,0.0.7,0.0.8,and avoid the version 0.0.1,0.0.2,0.0.3,0.0.4,0.0.5,0.0.6,0.0.7,0.0.8