CVE-2023-25345: Path Traversal
Published Mar 15, 2023
·Updated
Directory traversal vulnerability in swig-templates thru 2.0.4 and swig thru 1.4.2, allows attackers to read arbitrary files via the include or extends tags.
Affected Software
2 affected components
Swig-templates Project Swig-templates<=2.0.4
Swig Project Swig<=1.4.2
Event History
Mar 15, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·08:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-25345?
CVE-2023-25345 is rated as a high severity vulnerability due to its potential to expose sensitive file content.
2
How do I fix CVE-2023-25345?
To fix CVE-2023-25345, upgrade swig-templates to version 2.0.5 or later and swig to version 1.4.3 or later.
3
What types of attacks can CVE-2023-25345 enable?
CVE-2023-25345 can enable attackers to perform unauthorized file reads through directory traversal.
4
Which versions are affected by CVE-2023-25345?
CVE-2023-25345 affects swig-templates versions up to 2.0.4 and swig versions up to 1.4.2.
5
Is CVE-2023-25345 exploitable without authentication?
Yes, CVE-2023-25345 can be exploited by an attacker without needing authentication if proper input validation is not implemented.