CVE-2023-38501 copyparty vulnerable to reflected cross-site scripting via k304 parameter

copyparty is file server software. Prior to version 1.8.7, the application contains a reflected cross-site scripting via URL-parameter ?k304=... and ?setck=.... The worst-case outcome of this is being able to move or delete existing files on the server, or upload new files, using the account of t...

PT-2023-5946

Name of the Vulnerable Software and Affected Versions: copyparty versions prior to 1.8.7 Description: The application contains a reflected cross-site scripting vulnerability via URL-parameters ?k304=... and ?setck=.... This could allow an attacker to execute malicious javascript code by tricking...

Copyparty 跨站脚本漏洞

Copyparty is a portable file server for ed individual developers. A cross-site scripting vulnerability exists in versions prior to copyparty 1.8.7, which stems from a reflected cross-site scripting XSS vulnerability in parameters k304 and setck...

GHSA-CW7J-V52W-FP5R copyparty vulnerable to reflected cross-site scripting via hc parameter

Summary The application contains a reflected cross-site scripting via URL-parameter ?hc=... Details A reflected cross-site scripting XSS vulnerability exists in the web interface of the application that could allow an attacker to execute malicious javascript code by tricking users into accessing ...

PT-2023-33011 · Copyparty · Copyparty

Name of the Vulnerable Software and Affected Versions: copyparty affected versions not specified Description: A reflected cross-site scripting vulnerability exists in the web interface of the application, allowing an attacker to execute malicious javascript code by tricking users into accessing a...

The vulnerability of the Copyparty file server arises from errors in processing the relative path to the restricted access directory. This allows a perpetrator to gain read, modify, or delete access to data.

The vulnerability of the Copyparty server is related to errors in processing the relative path to the /.cpr directory http://localhost:3923/.cpr/. This limited access can allow a malicious actor to gain read, modify, or delete privileges...

Path Traversal

copyparty is vulnerable to Path Traversal. The vulnerability exists because the library does not properly validate the .cpr endpoint in httpcli.py, allowing an attacker to access files outside the expected directory and read arbitrary files through relative paths such as \..filename...

CVE-2023-37474

Copyparty is a portable file server. Versions prior to 1.8.2 are subject to a path traversal vulnerability detected in the .cpr subfolder. The Path Traversal attack technique allows an attacker access to files, directories, and commands that reside outside the web document root directory. This...

PYSEC-2023-127

Copyparty is a portable file server. Versions prior to 1.8.2 are subject to a path traversal vulnerability detected in the .cpr subfolder. The Path Traversal attack technique allows an attacker access to files, directories, and commands that reside outside the web document root directory. This...

Path traversal

Copyparty is a portable file server. Versions prior to 1.8.2 are subject to a path traversal vulnerability detected in the .cpr subfolder. The Path Traversal attack technique allows an attacker access to files, directories, and commands that reside outside the web document root directory. This...

PYSEC-2023-127

Copyparty is a portable file server. Versions prior to 1.8.2 are subject to a path traversal vulnerability detected in the .cpr subfolder. The Path Traversal attack technique allows an attacker access to files, directories, and commands that reside outside the web document root directory. This...

CVE-2023-37474 Path traversal in copyparty

Copyparty is a portable file server. Versions prior to 1.8.2 are subject to a path traversal vulnerability detected in the .cpr subfolder. The Path Traversal attack technique allows an attacker access to files, directories, and commands that reside outside the web document root directory. This...

CVE-2023-37474 Path traversal in copyparty

Copyparty is a portable file server. Versions prior to 1.8.2 are subject to a path traversal vulnerability detected in the .cpr subfolder. The Path Traversal attack technique allows an attacker access to files, directories, and commands that reside outside the web document root directory. This...

CVE-2023-37474

Copyparty ≤ 1.8.2 directory traversal : A path traversal vulnerability exists in the .cpr subfolder of Copyparty, allowing unauthenticated access to files outside the web document root. The issue affects versions prior to 1.8.2 and is tied to directory traversal in the .cpr path. The flaw is miti...

CVE-2023-37474 Path traversal in copyparty

Copyparty is a portable file server. Versions prior to 1.8.2 are subject to a path traversal vulnerability detected in the .cpr subfolder. The Path Traversal attack technique allows an attacker access to files, directories, and commands that reside outside the web document root directory. This...

Copyparty 路径遍历漏洞

Copyparty is a portable file server for individual developers. A path traversal vulnerability exists in Copyparty versions prior to 1.8.2, which stems from a path traversal vulnerability in the ".cpr" subfolder...