CVE-2017-16142: Directory Traversal in infraserver

The vulnerability explicitly involves improper path resolution during HTTP request handling. The attack example demonstrates that raw user input (URL path segments like '/../../../../etc/passwd') is used to construct filesystem paths. This indicates the absence of: 1) path normalization to collapse '../' sequences, 2) validation against the intended root directory, and 3) security wrappers like express.static's safe defaults. While the exact implementation details of 'infraserver' are unavailable, the vulnerability pattern strongly implicates the core request-handling logic as the root cause.