CVE-2023-35843
HIGH EXPLOITED IN THE WILD NUCLEINocoDB < 0.106.1 - Unauthenticated Path Traversal via /download Route
Title source: llmExploitation Summary
CVE-2023-35843 has been observed exploited in the wild (reported by VulnCheck KEV, InTheWild.io). EIP tracks 2 public exploits from researchers including Lserein, b3nguang. A Nuclei detection template is also available.
AI-analyzed exploit summary This PoC exploits a path traversal vulnerability in NocoDB to read arbitrary files (e.g., /etc/passwd) via a crafted URL. It supports single URL and batch file input for testing.
Description
NocoDB through 0.106.0 (or 0.109.1) has a path traversal vulnerability that allows an unauthenticated attacker to access arbitrary files on the server by manipulating the path parameter of the /download route. This vulnerability could allow an attacker to access sensitive files and data on the server, including configuration files, source code, and other sensitive information.
Exploits (2)
This PoC exploits a path traversal vulnerability in NocoDB to read arbitrary files (e.g., /etc/passwd) via a crafted URL. It supports single URL and batch file input for testing.
This PoC exploits an arbitrary file read vulnerability in NocoDB via path traversal. It sends a crafted HTTP request to read `/etc/passwd` and checks for the presence of 'root' in the response to confirm exploitation.
Nuclei Templates (1)
http.favicon.hash:-2017596142
icon_hash=-2017596142
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N