CVE-2023-28458

pretalx 2.3.1 before 2.3.2 allows path traversal in HTML export (a non-default feature). Organizers can trigger the overwriting (with the standard pretalx 404 page content) of an arbitrary file.

CVSS v4.0 GitHub

5.3 MEDIUMCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

CVSS v3.1 NVD

4.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

EPSS

3.46% chance of exploitation in the next 30 days, 89th percentile

Published

2023-04-20

Updated

2025-02-05

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/pretalx_rce_cve_2023_…

Security advisories

• https://pretalx.com/p/news/security-release-232
• https://www.sonarsource.com/blog/pretalx-vulnerabilities-how-to-get-accepted-at-every-con…
• advisories/GHSA-23fx-92m6-4f2g
• pretalx/pretalx/commit/60722c43cf975f319e94102e6bff320723776890

References

• CVE Record
• NVD entry