CVE-2017-16184

CVE-2017-16184 is a directory traversal vulnerability affecting the scott-blanch-weather-app, a sample Node.js application using Express 4. An unauthenticated attacker can exploit this flaw by injecting "../" into the URL, gaining unauthorized access to the underlying filesystem. This vulnerability carries a high CVSS score of 7.5, indicating a severe risk with easy exploitation and potential for significant data exposure. While no public exploit code or active exploitation has been observed, and community discussion is minimal, the potential for unauthorized information disclosure remains a concern.