CVE-2023-35844

CVE-2023-35844 Lightdash file read vulnerability CVE-2023-35844...

CVE-2023-35844

creationtimestamp| type| source ---|---|--- 2023-06-19 07:25:13+00:00| seen| https://t.me/cibsecurity/65328 2023-06-26 10:27:38+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/4628 2023-06-27 14:13:45+00:00| seen| https://t.me/proxybar/1596 2023-06-28 15:16:50+00:00|...

CVE-2023-35844

packages/backend/src/routers in Lightdash before 0.510.3 has insecure file endpoints, e.g., they allow .. directory traversal and do not ensure that an intended file extension .csv or .png is used...

CVE-2023-35844

packages/backend/src/routers in Lightdash before 0.510.3 has insecure file endpoints, e.g., they allow .. directory traversal and do not ensure that an intended file extension .csv or .png is used...

CVE-2023-35844

Lightdash

CVE-2023-35844

packages/backend/src/routers in Lightdash before 0.510.3 has insecure file endpoints, e.g., they allow .. directory traversal and do not ensure that an intended file extension .csv or .png is used...