Lucene search
MitreCVELIST:CVE-2023-35844HistoryJun 19, 2023 - 12:00 a.m.
CVE-2023-35844
2023-06-1900:00:00
mitre
www.cve.org
lightdash
file endpoints
directory traversal
file extension.
0.161 Low
EPSS
Percentile
96.0%
packages/backend/src/routers in Lightdash before 0.510.3 has insecure file endpoints, e.g., they allow … directory traversal and do not ensure that an intended file extension (.csv or .png) is used.
Related
cve
cve
CVE-2023-35844
2023-06-19 02:15:08
nuclei
nuclei
Lightdash version <= 0.510.3 Arbitrary File Read
2023-06-19 19:23:05
prion
prion
Directory traversal
2023-06-19 02:15:00
osv
osv
CVE-2023-35844
2023-06-19 02:15:08
nvd
nvd
CVE-2023-35844
2023-06-19 02:15:08
githubexploit
githubexploit
Exploit for Path Traversal in Lightdash
2023-06-26 10:14:29