Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-34062

In Reactor Netty HTTP Server, versions 1.1.x prior to 1.1.13 and versions 1.0.x prior to 1.0.39, a malicious user can send a request using a specially crafted URL that can lead to a directory traversal attack. Specifically, an application is vulnerable if Reactor Netty HTTP Server is configured to serve static resources.

Published

2023-11-15T10:15:07.277

Last Modified

2024-11-21T08:06:30.190

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.5 (HIGH)

Weaknesses
  • Type: Primary
    CWE-22
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application pivotal reactor_netty < 1.0.39 Yes
Application pivotal reactor_netty < 1.1.13 Yes
References