CVE-2017-16036

CVE-2017-16036 describes a directory traversal vulnerability in badjs-sourcemap-server, a component that processes files from badjs-sourcemap. An unauthenticated attacker can exploit this flaw by embedding "../" sequences in URLs, gaining unauthorized access to the server's filesystem. This vulnerability carries a CVSS v3 score of 7.5 (HIGH), indicating a high impact on confidentiality with low attack complexity and no user interaction required. While no public exploits, Metasploit modules, or Nuclei templates are currently available, and there's no evidence of active exploitation or significant community discussion, the potential for data exposure remains a concern.