CVE-2023-37781: Path Traversal
Published Jul 17, 2023
·Updated
An issue in the emqxsn plugin of EMQX v4.3.8 allows attackers to execute a directory traversal via uploading a crafted .txt file.
Affected Software
1 affected component
emqx emqx=4.3.8
Event History
Jul 17, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
08:15 PM
Description
Data Sourced
via NVD·08:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-37781?
CVE-2023-37781 is considered a critical vulnerability due to its potential for directory traversal attacks.
2
How do I fix CVE-2023-37781?
To fix CVE-2023-37781, upgrade EMQX to version 4.3.9 or later, which addresses this vulnerability.
3
Which versions of EMQX are affected by CVE-2023-37781?
CVE-2023-37781 specifically affects EMQX version 4.3.8.
4
What kind of attack can be executed through CVE-2023-37781?
CVE-2023-37781 allows attackers to perform directory traversal attacks by uploading a specially crafted .txt file.
5
Is there a workaround for CVE-2023-37781 if I cannot upgrade?
There are no known effective workarounds for CVE-2023-37781, so upgrading is strongly recommended.