packages/backend/src/routers in Lightdash before 0.510.3 has insecure file endpoints, e.g., they allow .. directory traversal and do not ensure that an intended file extension (.csv or .png) is used.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2023-06-19T00:00:00
Updated: 2024-08-02T16:30:45.363Z
Reserved: 2023-06-19T00:00:00
Link: CVE-2023-35844
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2023-06-19T02:15:08.903
Modified: 2023-06-27T15:48:14.627
Link: CVE-2023-35844
Redhat
No data.