CVE-2023-6722 - CVE House
Back to Database
Status published High CVE-2023-6722

Relative Path Traversal in Repox

Vulnerability Description

A path traversal vulnerability has been detected in Repox, which allows an attacker to read arbitrary files on the running server, resulting in a disclosure of sensitive information. An attacker could access files such as application code or data, backend credentials, operating system files...

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-6722

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • David Cámara Galindo
  • Andrés Elizalde Galdeano

References

More from Repox

View All →
CVE-2023-6723
Unrestricted Upload of File with Dangerous Type in Repox
Critical 10
CVE-2023-6721
Improper Restriction of XML External Entity Reference in Repox
High 8.3
CVE-2023-6720
Cross-site Scripting in Repox
Medium 5.5
CVE-2023-6719
Cross-site Scripting in Repox
Medium 6.3
CVE-2023-6718
Authentication Bypass Using an Alternate Path or Channel in Repox
Critical 9.4

Affected Vendor

Affected Software

Repox
Vulnerable Versions:
0

Timeline

Official Publish: December 13th, 2023
Last Modified: August 2nd, 2024
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

CWE-23

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application
Initial Access
T1005 Data from Local System
Collection
T1552 Unsecured Credentials
Credential Access
T1105 Ingress Tool Transfer
Command and Control
T1565 Data Manipulation
Impact