Lucene search

Path Traversal

🗓️ 20 Oct 2023 07:28:39Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 11 Views

github.com/arduino/arduino-create-agent is vulnerable to Path Traversal due to inadequate sanitization of the `filename` parameter, allowing attackers to execute HTTP requests and potentially elevate their privileges via the `/upload` interface

Reporter	Title	Published	Views	Family All 8
Prion	Design/Logic Flaw	18 Oct 202321:15	–	prion
Vulnrichment	CVE-2023-43802 Path traversal in Arduino Create Agent	18 Oct 202320:39	–	vulnrichment
NVD	CVE-2023-43802	18 Oct 202321:15	–	nvd
CVE	CVE-2023-43802	18 Oct 202321:15	–	cve
OSV	Arduino Create Agent path traversal - local privilege escalation vulnerability	18 Oct 202318:21	–	osv
OSV	CVE-2023-43802	18 Oct 202321:15	–	osv
Cvelist	CVE-2023-43802 Path traversal in Arduino Create Agent	18 Oct 202320:39	–	cvelist
Github Security Blog	Arduino Create Agent path traversal - local privilege escalation vulnerability	18 Oct 202318:21	–	github

Vulners

Node

veracode github.com\/arduino\/arduino-create-agentRange1.3.2–1.3.2

Source	Link
github	www.github.com/arduino/arduino-create-agent/commit/cc9a238604c9db0b3e5bd92c1d0b40345d814058
github	www.github.com/arduino/arduino-create-agent/security/advisories/GHSA-75j7-w798-cwwx
github	www.github.com/arduino/arduino-create-agent/releases/tag/1.3.3
nozominetworks	www.nozominetworks.com/blog/security-flaws-affect-a-component-of-the-arduino-create-cloud-ide

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

20 Oct 2023 07:39Current

7.1High risk

Vulners AI Score7.1

CVSS37.8

EPSS0.001