PT-2023-6539 · Nocodb · Nocodb
Published
2023-06-19
·
Updated
2024-12-12
·
CVE-2023-35843
CVSS v2.0
7.8
High
| Vector | AV:N/AC:L/Au:N/C:C/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
NocoDB versions 0.106.0 and earlier
NocoDB version 0.109.1
Description
The issue is related to a path traversal vulnerability that allows an unauthenticated attacker to access arbitrary files on the server by manipulating the
path parameter of the "/download" route. This could allow an attacker to access sensitive files and data on the server, including configuration files, source code, and other sensitive information. The vulnerability is associated with incorrect restriction of the directory path name with limited access, which could enable a remote attacker to gain unauthorized access to protected information.Recommendations
For NocoDB versions 0.106.0 and earlier: Update to a version later than 0.106.0 to resolve the issue.
For NocoDB version 0.109.1: Update to a version later than 0.109.1 to resolve the issue.
As a temporary workaround, consider restricting access to the
/download route until a patch is available.
Avoid using the path parameter in the affected /download route until the issue is resolved.Exploit
Fix
Path traversal
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Nocodb