Skip to content
OpenAdvisories

Vendor

9001

14 known vulnerabilities.

Products

3 results · Clear filters · Feed

  • Medium 6.3
    CVE-2025-54589 Public exploit Scanner template

    copyparty Reflected XSS via Filter Parameter

    Copyparty is a portable file server. In versions 1.18.6 and below, when accessing the recent uploads page at `/?ru`, users can filter the results using an input field at the top. This field appends a filter parameter to the URL, which reflects its value direc…

  • Medium 6.3
    CVE-2023-38501 Public exploit Scanner template

    copyparty vulnerable to reflected cross-site scripting via k304 parameter

    copyparty is file server software. Prior to version 1.8.7, the application contains a reflected cross-site scripting via URL-parameter `?k304=...` and `?setck=...`. The worst-case outcome of this is being able to move or delete existing files on the server, o…

  • High 7.5
    CVE-2023-37474 Public exploit Scanner template EPSS 45%

    Path traversal in copyparty

    Copyparty is a portable file server. Versions prior to 1.8.2 are subject to a path traversal vulnerability detected in the `.cpr` subfolder. The Path Traversal attack technique allows an attacker access to files, directories, and commands that reside outside …