CVE-2017-16217: WebRTC-Experiment Fbr-Client

High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days.

fbr-client sends files through sockets via socket.io and webRTC. fbr-client is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.

Affected products

• WebRTC-Experiment Fbr-Client: any version

Published 2018-06-07. Last modified 2026-06-17.