CVE-2023-28458

moderate-risk
Published 2023-04-20

pretalx 2.3.1 before 2.3.2 allows path traversal in HTML export (a non-default feature). Organizers can trigger the overwriting (with the standard pretalx 404 page content) of an arbitrary file.

Do I need to act?

!
70.1% chance of exploitation in next 30 days
EPSS score — higher than 30% of all CVEs
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
4
CVSS 4.3/10 Medium
NETWORK / LOW complexity

Affected Products (1)

Pretalx

Affected Vendors

Pretalx

References (8)

Patch https://github.com/pretalx/pretalx/commit/60722c43cf975f319e94102e6bff3207237768...
Release Notes https://github.com/pretalx/pretalx/releases/tag/v2.3.2
Vendor Advisory https://pretalx.com/p/news/security-release-232/
Exploit https://www.sonarsource.com/blog/pretalx-vulnerabilities-how-to-get-accepted-at-...
Patch https://github.com/pretalx/pretalx/commit/60722c43cf975f319e94102e6bff3207237768...
Release Notes https://github.com/pretalx/pretalx/releases/tag/v2.3.2
Vendor Advisory https://pretalx.com/p/news/security-release-232/
Exploit https://www.sonarsource.com/blog/pretalx-vulnerabilities-how-to-get-accepted-at-...
42
/ 100
moderate-risk
Severity 18/34 · Moderate
Exploitability 19/34 · Moderate
Exposure 5/34 · Minimal