CVE-2023-34062: Path Traversal
In Reactor Netty HTTP Server, versions 1.1.x prior to 1.1.13 and versions 1.0.x prior to 1.0.39, a malicious user can send a request using a specially crafted URL that can lead to a directory traversal attack.
Specifically, an application is vulnerable if Reactor Netty HTTP Server is configured to serve static resources.
Other sources
VMware Tanzu Reactor Netty could allow a remote attacker to traverse directories on the system, caused by improper validation of user request. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
maven/io.projectreactor.netty:reactor-netty-httpto a version that resolves this vulnerability.Fixed in 1.0.39 - Upgrade
Upgrade
maven/io.projectreactor.netty:reactor-netty-httpto a version that resolves this vulnerability.Fixed in 1.1.13 - Upgrade
Upgrade
Reactor Netty HTTP Serverto a version that resolves this vulnerability.Fixed in 1.1.13 - Upgrade
Upgrade
Reactor Netty HTTP Serverto a version that resolves this vulnerability.Fixed in 1.0.39 - Configuration
If Reactor Netty HTTP Server is configured to serve static resources, change configuration so static resource serving is not enabled to prevent directory traversal via crafted URL requests containing /../ sequences.
Reactor Netty HTTP Server static resource serving = disabled
Event History
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2023-34062.
What is the severity of CVE-2023-34062?
The severity of CVE-2023-34062 is high, with a severity value of 7.5.
Which versions of Reactor Netty HTTP Server are affected by CVE-2023-34062?
Reactor Netty HTTP Server versions 1.1.x prior to 1.1.13 and versions 1.0.x prior to 1.0.39 are affected by CVE-2023-34062.
How can a malicious user exploit CVE-2023-34062?
A malicious user can exploit CVE-2023-34062 by sending a request with a specially crafted URL that leads to a directory traversal attack.
Where can I find more information about CVE-2023-34062?
You can find more information about CVE-2023-34062 on the following sources: [Spring](https://spring.io/security/cve-2023-34062), [NVD](https://nvd.nist.gov/vuln/detail/CVE-2023-34062), [GitHub Advisories](https://github.com/advisories/GHSA-xjhv-p3fv-x24r).