CVE-2023-5257

LOW

WhiteHSBG JNDIExploit 1.4 - Path Traversal in HTTPServer handleFileRequest

Title source: llm

Description

A vulnerability was found in WhiteHSBG JNDIExploit 1.4 on Windows. It has been rated as problematic. Affected by this issue is the function handleFileRequest of the file src/main/java/com/feihong/ldap/HTTPServer.java. The manipulation leads to path traversal. The exploit has been disclosed to the public and may be used. VDB-240866 is the identifier assigned to this vulnerability.

References (3)

Core 3

Core References

Third Party Advisory vdb-entry technical-description

https://vuldb.com/?id.240866

Third Party Advisory signature permissions-required

https://vuldb.com/?ctiid.240866

Exploit, Third Party Advisory exploit issue-tracking

https://github.com/WhiteHSBG/JNDIExploit/issues/10

Scores

CVSS v3 3.5

EPSS 0.0077

EPSS Percentile 50.9%

Attack Vector ADJACENT_NETWORK

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-22

Status published

Products (1)

whitehsbg/jndiexploit 1.4

Published Sep 29, 2023

Tracked Since Feb 18, 2026