← CVE Intelligence

CVE-2023-0745

Arbitrary File Write in High Availability Backup Upload PUBLISHED

Description (CNA)

The High Availability functionality of Yugabyte Anywhere can be abused to write arbitrary files through the backup upload endpoint by using path traversal characters. This vulnerability is associated with program files PlatformReplicationManager.Java. This issue affects YugabyteDB Anywhere: from 2.0.0.0 through 2.13.0.0

Affected (CNA)

Vendor / productVersions
YugabyteDB / YugabyteDB Anywhereaffected 2.0 through 2.13

CWE

CWE-23

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.