CVE-2023-35844

packages/backend/src/routers in Lightdash before 0.510.3 has insecure file endpoints, e.g., they allow .. directory traversal and do not ensure that an intended file extension (.csv or .png) is used.

CVSS v3.1 NVD

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

6.34% chance of exploitation in the next 30 days, 94th percentile

Nuclei

high · CWE-22

Published

2023-06-19

Updated

2024-12-11

Proof-of-concept exploits (3)

• https://advisory.dw1.io/59
• Lserein/CVE-2023-3584420★ · 2023-06-26
• Szlein/CVE-2023-3584420★ · 2023-06-26

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-35844.yaml

Exploit collections (1)

• CVE-2023-35844.yamlzan8in/afrog

Security advisories

• lightdash/lightdash/pull/5090

References

• CVE Record
• NVD entry

Related

• CVE-2023-34598
• CVE-2023-35843