Skip to content
OpenAdvisories
High · 7.5 CVE-2023-6722 EUVD-2023-0297GHSA-j23g-rwv7-hxf5PYSEC-2023-297

Relative Path Traversal in Repox

Published Dec 13, 2023 · Updated Aug 2, 2024 · Assigned by INCIBE

Description

A path traversal vulnerability has been detected in Repox, which allows an attacker to read arbitrary files on the running server, resulting in a disclosure of sensitive information. An attacker could access files such as application code or data, backend credentials, operating system files...

Affected products

VendorProductAffectedFixed
Repox Repox ≤ 2.3.7 —

References