NA

CVE-2023-37474

Published: 14/07/2023 Updated: 31/07/2023
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 0

Vulnerability Summary

Copyparty is a portable file server. Versions before 1.8.2 are subject to a path traversal vulnerability detected in the `.cpr` subfolder. The Path Traversal attack technique allows an attacker access to files, directories, and commands that reside outside the web document root directory. This issue has been addressed in commit `043e3c7d` which has been included in release 1.8.2. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Vulnerable Product Search on Vulmon Subscribe to Product

copyparty project copyparty

Vendor Advisories

Check Point Reference: CPAI-2023-1630 Date Published: 4 Apr 2024 Severity: High ...

Exploits

Copyparty version 182 suffers from a directory traversal vulnerability ...