CVE-2016-10561CWE-22

CVE-2016-10561: vulnerability in HackerOne bitty node module

Published · Updated

Follow this CVE+ Monitor bitty node module+ Monitor bitty

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.5%
Bitty is a development web server tool that functions similar to `python -m SimpleHTTPServer`. Version 0.2.10 has a directory traversal vulnerability that is exploitable via the URL path in GET requests.
Affected products
HackerOne · bitty node module