VYPR
← All advisories
High severityNVD Advisory· Published Nov 15, 2023· Updated Aug 29, 2024

CVE-2023-34062

CVE-2023-34062

Description

In Reactor Netty HTTP Server, versions 1.1.x prior to 1.1.13 and versions 1.0.x prior to 1.0.39, a malicious user can send a request using a specially crafted URL that can lead to a directory traversal attack.

Specifically, an application is vulnerable if Reactor Netty HTTP Server is configured to serve static resources.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
io.projectreactor.netty:reactor-netty-httpMaven
>= 1.1.0, < 1.1.131.1.13
io.projectreactor.netty:reactor-netty-httpMaven
>= 1.0.0, < 1.0.391.0.39

Affected products

141

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.