Lucene search

K
cvelistMitreCVELIST:CVE-2023-28458
HistoryApr 20, 2023 - 12:00 a.m.

CVE-2023-28458

2023-04-2000:00:00
mitre
www.cve.org
preatlx
html export
path traversal
file overwriting

5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.7%

pretalx 2.3.1 before 2.3.2 allows path traversal in HTML export (a non-default feature). Organizers can trigger the overwriting (with the standard pretalx 404 page content) of an arbitrary file.

5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.7%

Related for CVELIST:CVE-2023-28458