Lucene search
MitreCVELIST:CVE-2023-28459HistoryApr 20, 2023 - 12:00 a.m.
CVE-2023-28459
2023-04-2000:00:00
mitre
www.cve.org
cve-2023-28459
pretalx
path traversal
html export
arbitrary files
0.001 Low
EPSS
Percentile
48.8%
pretalx 2.3.1 before 2.3.2 allows path traversal in HTML export (a non-default feature). Users were able to upload crafted HTML documents that trigger the reading of arbitrary files.
Related
osv
osv
PYSEC-2023-41
2023-04-20 21:15:00
pretalx vulnerable to path traversal in HTML export
2023-04-20 21:33:27
CVE-2023-28459
2023-04-20 21:15:08
nvd
nvd
CVE-2023-28459
2023-04-20 21:15:08
prion
prion
Path traversal
2023-04-20 21:15:00
github
github
pretalx vulnerable to path traversal in HTML export
2023-04-20 21:33:27
cve
cve
CVE-2023-28459
2023-04-20 21:15:08
veracode
veracode
Path Traversal
2023-04-27 15:27:05