Medium severity6.7NVD Advisory· Published Feb 9, 2023· Updated Jun 17, 2026
CVE-2023-0745
CVE-2023-0745
Description
The High Availability functionality of Yugabyte Anywhere can be abused to write arbitrary files through the backup upload endpoint by using path traversal characters.
This vulnerability is associated with program files PlatformReplicationManager.Java.
This issue affects YugabyteDB Anywhere: from 2.0.0.0 through 2.13.0.0
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:yugabyte:yugabytedb_managed:*:*:*:*:*:*:*:*Range: >=2.0,<=2.13
- Range: 2.0.0.0 - 2.13.0.0
- Range: 2.0
Patches
Vulnerability mechanics
References
1- www.yugabyte.comnvdProduct
News mentions
0No linked articles in our index yet.