pretalx 2.3.1 before 2.3.2 allows path traversal in HTML export (a non-default feature). Organizers can trigger the overwriting (with the standard pretalx 404 page content) of an arbitrary file.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2023-04-20T00:00:00
Updated: 2024-08-02T12:38:25.307Z
Reserved: 2023-03-15T00:00:00
Link: CVE-2023-28458
Vulnrichment
No data.
NVD
Status : Modified
Published: 2023-04-20T21:15:08.770
Modified: 2024-11-21T07:55:07.423
Link: CVE-2023-28458
Redhat
No data.