CVE-2023-35843

NocoDB through 0.106.0 (or 0.109.1) has a path traversal vulnerability that allows an unauthenticated attacker to access arbitrary files on the server by manipulating the path parameter of the /download route. This vulnerability could allow an attacker to access sensitive files and data on the server, including configuration files, source code, and other sensitive information.

CVSS v3.1 NVD

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

8.88% chance of exploitation in the next 30 days, 95th percentile

Nuclei

high · CWE-22

Published

2023-06-19

Updated

2024-12-11

Proof-of-concept exploits (4)

• https://advisory.dw1.io/60
• Lserein/CVE-2023-358432★ · 2023-06-27
• Szlein/CVE-2023-358432★ · 2023-06-27
• b3nguang/CVE-2023-358430★ · 2023-07-10

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-35843.yaml

Exploit collections (1)

• CVE-2023-35843.yamlzan8in/afrog

Security advisories

• nocodb/nocodb/blob/6decfa2b20c28db9946bddce0bcb1442b683ecae/packages/nocodb/src/lib/contr…

References

• CVE Record
• NVD entry

Related

• CVE-2023-34598
• CVE-2023-35844