← CVE Intelligence

CVE-2023-34062

n/a / Reactor Netty PUBLISHED

Description (CNA)

In Reactor Netty HTTP Server, versions 1.1.x prior to 1.1.13 and versions 1.0.x prior to 1.0.39, a malicious user can send a request using a specially crafted URL that can lead to a directory traversal attack. Specifically, an application is vulnerable if Reactor Netty HTTP Server is configured to serve static resources.

Affected (CNA)

Vendor / productVersions
n/a / Reactor Nettyaffected 1.1.0 before 1.1.13; affected 1.0.0 before 1.0.39; affected older unsupported versions

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.