CVE Catalog

CVE-2023-34843

HighCVSS 7.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Very high risk
6.41%

93th percentile - higher than 93% of all known CVEs

Summary

Traggo Server version 0.3.0 is vulnerable to directory traversal via a crafted GET request.

Risk Assessment

An attacker may gain access to system files, potentially leading to the disclosure of sensitive data or system compromise.

Recommendation

It is recommended to update Traggo Server to the latest version to mitigate this vulnerability and to monitor server logs for potential attack attempts.

Original NVD description (English source)

Traggo Server 0.3.0 is vulnerable to directory traversal via a crafted GET request.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS