CVE-2017-16101

CVE-2017-16101 describes a directory traversal vulnerability in serverwg, a simple HTTP server. An unauthenticated attacker can exploit this flaw by injecting "../" sequences into a URL, gaining unauthorized access to files and directories on the underlying filesystem. This vulnerability carries a CVSS v3 score of 7.5 (High), indicating a high impact on confidentiality with no integrity or availability impact, and can be exploited remotely with low attack complexity. While no active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion has been observed, the potential for data exposure remains a concern.