Traggo Server - Local File Inclusion

traggo/server version 0.3.0 is vulnerable to directory traversal. id: CVE-2023-34843 info: name: Traggo Server - Local File Inclusion author: DhiyaneshDk severity: high description: | traggo/server version 0.3.0 is vulnerable to directory traversal. impact: | Successful exploitation of this...

CVE-2023-34843

CVE-2023-34843 漏洞披露 traggo/server 0.3.0 版本存在目录遍历漏洞。 复现步骤： 1. 在你的端点/服务器上搭建 traggo/server。 https://traggo.net/install/ 2. 向以下 URL 发起 GET 请求。 curl -X GET http://localhost:3030/static/..%5c..%5c..%5c..%5cetc/passwd 3. 查看 /etc/passwd 的内容...

CVE-2023-34843

Traggo Server 0.3.0 is vulnerable to directory traversal via a crafted GET request...

CVE-2023-34843

Traggo Server 0.3.0 is vulnerable to directory traversal via a crafted GET request...

CVE-2023-34843

Traggo Server 0.3.0 is vulnerable to directory traversal via a crafted GET request...

Directory traversal

Traggo Server 0.3.0 is vulnerable to directory traversal via a crafted GET request...

Traggo server directory traversal vulnerability

Traggo is a tag-based time tracking tool. A directory traversal vulnerability exists in the Traggo server, which can be exploited by an attacker to read arbitrary files...

CVE-2023-34843

Traggo Server 0.3.0 is vulnerable to directory traversal via a crafted GET request...

Traggo Server 路径遍历漏洞

Traggo is a tag-based time tracking tool. A directory traversal vulnerability exists in the Traggo server, which can be exploited by an attacker to read arbitrary files...

PT-2023-25029 · Unknown · Traggo Server

Name of the Vulnerable Software and Affected Versions: Traggo Server version 0.3.0 Description: The issue allows for directory traversal via a crafted GET request. This enables unauthorized access to sensitive files and directories on the server. Recommendations: For Traggo Server version 0.3.0,...

CVE-2023-34843

Traggo Server 0.3.0 is vulnerable to directory traversal via a crafted GET request...