CVE-2023-35844

packages/backend/src/routers in Lightdash before 0.510.3 has insecure file endpoints, e.g., they allow .. directory traversal and do not ensure that an intended file extension (.csv or .png) is used.

CVSS v3.1

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS v3.1

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

6.34% chance of exploitation in the next 30 days, 93th percentile

Nuclei

high · CWE-22

Published

2023-06-19

Updated

2024-12-11

Proof-of-concept exploits (3)

• https://advisory.dw1.io/59
• Lserein/CVE-2023-3584420★ · 2023-06-26
• Szlein/CVE-2023-3584420★ · 2023-06-26

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-35844.yaml

Exploit collections (1)

• zan8in/afrog/blob/main/pocs/afrog-pocs/CVE/2023/CVE-2023-35844.yaml

References

• CVE Record
• NVD entry

Related

• CVE-2023-34598
• CVE-2023-35843
• CVE-2023-35861
• CVE-2023-35841
• CVE-2023-35863
• CVE-2023-35840