CVE-2017-1000170

jqueryFileTree 2.1.5 and older Directory Traversal

Basic Information

CVE State: PUBLISHED
Reserved Date: November 17, 2017
Published Date: November 17, 2017
Last Updated: August 05, 2024
Vendor: jqueryFileTree
Product: jqueryFileTree
Description: jqueryFileTree 2.1.5 and older Directory Traversal
Tags

CVSS Scores

CVSS v3.1

7.5 - HIGH

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS v2.0

5.0

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS Score

Score: 90.04% (Percentile: 99.55%) as of 2025-06-14

Exploit Status

Exploited in the Wild: Yes (2025-05-31 00:00:00 UTC) Source

References

https://github.com/jqueryfiletree/jqueryfiletree/issues/66 http://packetstormsecurity.com/files/161900/WordPress-Delightful-Downloads-Jquery-File-Tree-1.6.6-Path-Traversal.html

Known Exploited Vulnerability Information

Source	Added Date
The Shadowserver (via CIRCL)	2025-06-01 12:00:31 UTC

Scanner Integrations

Scanner	URL	Date Detected
Nuclei	https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-1000170.yaml	2025-04-26 00:00:00 UTC

Timeline

CVE ID Reserved

November 17, 2017
CVE Published to Public

November 17, 2017
Detected by Nuclei

April 26, 2025
Added to KEVIntel

June 01, 2025