CVE-2017-16091

CVE-2017-16091 describes a directory traversal vulnerability in the xtalk project's xtalk software, which facilitates browser communication with the nodex web framework. This flaw allows an unauthenticated attacker to access the underlying filesystem by injecting "../" sequences into a URL. With a CVSS score of 7.5 (High), the vulnerability is easily exploitable over the network with low attack complexity, potentially leading to significant information disclosure. Despite its high severity, there is no evidence of active exploitation, and no public exploit code or community discussion has been identified.