CVE-2023-35843

NocoDB through 0.106.0 (or 0.109.1) has a path traversal vulnerability that allows an unauthenticated attacker to access arbitrary files on the server by manipulating the path parameter of the /download route. This vulnerability could allow an attacker to access sensitive files and data on the server, including configuration files, source code, and other sensitive information.

CVSS v3.1

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS v3.1

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

8.88% chance of exploitation in the next 30 days, 95th percentile

Nuclei

high · CWE-22

Published

2023-06-19

Updated

2024-12-11

Proof-of-concept exploits (4)

• https://advisory.dw1.io/60
• Lserein/CVE-2023-358432★ · 2023-06-27
• Szlein/CVE-2023-358432★ · 2023-06-27
• b3nguang/CVE-2023-358430★ · 2023-07-10

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-35843.yaml

Exploit collections (1)

• zan8in/afrog/blob/main/pocs/afrog-pocs/CVE/2023/CVE-2023-35843.yaml

References

• CVE Record
• NVD entry

Related

• CVE-2023-34598
• CVE-2023-35844
• CVE-2023-35841
• CVE-2023-35840
• CVE-2023-35861
• CVE-2023-35839