CVE-2017-16224

CVE-2017-16224 describes an open redirect vulnerability in the 'st' module, used for serving static files. An attacker can craft a specific request to redirect users to an arbitrary external domain, provided 'st' is serving from the root directory. This vulnerability has a CVSS score of 6.1 (Medium), indicating a network-based attack with low complexity, requiring user interaction, and potentially leading to low impact on confidentiality and integrity. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.