CVE-2023-50263

🗓️ 12 Dec 2023 22:17:00Reported by GitHub_MType

cve🔗 web.nvd.nist.gov👁 55 Views🌐 WEB

Nautobot 1.x and 2.0.x prior to 1.6.7 and 2.0.6 allow unauthenticated access to files via specially-crafted URL

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2023-50263	4 Jan 202409:41	–	circl
CNNVD	Nautobot Security Vulnerability	12 Dec 202300:00	–	cnnvd
Cvelist	CVE-2023-50263 Nautobot allows unauthenticated db-file-storage views	12 Dec 202322:17	–	cvelist
EUVD	EUVD-2023-0180	3 Oct 202520:07	–	euvd
Github Security Blog	Unauthenticated db-file-storage views	13 Dec 202313:35	–	github
NVD	CVE-2023-50263	12 Dec 202323:15	–	nvd
OSV	GHSA-75MC-3PJC-727Q Unauthenticated db-file-storage views	13 Dec 202313:35	–	osv
OSV	PYSEC-2023-286	12 Dec 202323:15	–	osv
Prion	Design/Logic Flaw	12 Dec 202323:15	–	prion
PyPA	PYSEC-2023-286	12 Dec 202323:15	–	pypa

NVD

Vulners

Node

networktocode nautobotRange1.1.0–1.6.7

networktocode nautobotRange2.0.0–2.0.6

[
  {
    "vendor": "nautobot",
    "product": "nautobot",
    "versions": [
      {
        "version": ">= 1.1.0, < 1.6.7",
        "status": "affected"
      },
      {
        "version": ">= 2.0.0, < 2.0.6",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/nautobot/nautobot/pull/4959
github	www.github.com/nautobot/nautobot/security/advisories/GHSA-75mc-3pjc-727q
github	www.github.com/victor-o-silva/db_file_storage/blob/master/db_file_storage/views.py
github	www.github.com/nautobot/nautobot/pull/4964
github	www.github.com/nautobot/nautobot/commit/7c4cf3137f45f1541f09f2f6a7f8850cd3a2eaee
github	www.github.com/nautobot/nautobot/commit/458280c359a4833a20da294eaf4b8d55edc91cee

Parameter	Position	Path	Description	CWE
name	path	/files/get/	Unauthenticated access to file retrieval via Job FileVar uploads due to Django-django-db-file-storage integration.	CWE-200, CWE-306
name	path	/files/download/	Unauthenticated access to file download via Job FileVar uploads due to Django-django-db-file-storage integration.	CWE-200, CWE-306

17 Jun 2026 06:39Current

5.1Medium risk

Vulners AI Score5.1

CVSS 3.13.7 - 5.3

EPSS0.00754