PT-2023-33011 · Copyparty · Copyparty

Name of the Vulnerable Software and Affected Versions: copyparty affected versions not specified Description: A reflected cross-site scripting vulnerability exists in the web interface of the application, allowing an attacker to execute malicious javascript code by tricking users into accessing a...

The vulnerability of the Copyparty file server arises from errors in processing the relative path to the restricted access directory. This allows a perpetrator to gain read, modify, or delete access to data.

The vulnerability of the Copyparty server is related to errors in processing the relative path to the /.cpr directory http://localhost:3923/.cpr/. This limited access can allow a malicious actor to gain read, modify, or delete privileges...

Path Traversal

copyparty is vulnerable to Path Traversal. The vulnerability exists because the library does not properly validate the .cpr endpoint in httpcli.py, allowing an attacker to access files outside the expected directory and read arbitrary files through relative paths such as \..filename...

CVE-2023-37474

Copyparty is a portable file server. Versions prior to 1.8.2 are subject to a path traversal vulnerability detected in the .cpr subfolder. The Path Traversal attack technique allows an attacker access to files, directories, and commands that reside outside the web document root directory. This...

Path traversal

Copyparty is a portable file server. Versions prior to 1.8.2 are subject to a path traversal vulnerability detected in the .cpr subfolder. The Path Traversal attack technique allows an attacker access to files, directories, and commands that reside outside the web document root directory. This...

PYSEC-2023-127

Copyparty is a portable file server. Versions prior to 1.8.2 are subject to a path traversal vulnerability detected in the .cpr subfolder. The Path Traversal attack technique allows an attacker access to files, directories, and commands that reside outside the web document root directory. This...

PYSEC-2023-127

Copyparty is a portable file server. Versions prior to 1.8.2 are subject to a path traversal vulnerability detected in the .cpr subfolder. The Path Traversal attack technique allows an attacker access to files, directories, and commands that reside outside the web document root directory. This...

CVE-2023-37474 Path traversal in copyparty

Copyparty is a portable file server. Versions prior to 1.8.2 are subject to a path traversal vulnerability detected in the .cpr subfolder. The Path Traversal attack technique allows an attacker access to files, directories, and commands that reside outside the web document root directory. This...

CVE-2023-37474 Path traversal in copyparty

Copyparty is a portable file server. Versions prior to 1.8.2 are subject to a path traversal vulnerability detected in the .cpr subfolder. The Path Traversal attack technique allows an attacker access to files, directories, and commands that reside outside the web document root directory. This...

CVE-2023-37474 Path traversal in copyparty

Copyparty is a portable file server. Versions prior to 1.8.2 are subject to a path traversal vulnerability detected in the .cpr subfolder. The Path Traversal attack technique allows an attacker access to files, directories, and commands that reside outside the web document root directory. This...

CVE-2023-37474

Copyparty ≤ 1.8.2 directory traversal : A path traversal vulnerability exists in the .cpr subfolder of Copyparty, allowing unauthenticated access to files outside the web document root. The issue affects versions prior to 1.8.2 and is tied to directory traversal in the .cpr path. The flaw is miti...

Copyparty 路径遍历漏洞

Copyparty is a portable file server for individual developers. A path traversal vulnerability exists in Copyparty versions prior to 1.8.2, which stems from a path traversal vulnerability in the ".cpr" subfolder...