CVE-2017-16160

CVE-2017-16160 describes a directory traversal vulnerability in 11xiaoli, a simple file server. An unauthenticated attacker can exploit this by injecting "../" into a URL, gaining unauthorized access to the underlying filesystem. This high-severity vulnerability (CVSS 7.5) requires no user interaction and has a high impact on confidentiality. While no public exploits, Metasploit modules, or active exploitation have been identified, the simplicity of the attack vector makes it a notable risk.