CVE-2023-46307

7.5 highEPSS 1.3%

High (7.5) in buddho etcd browser. EPSS 1.3% chance of exploitation in the next 30 days.

An issue was discovered in server.js in etcd-browser 87ae63d75260. By supplying a /../../../ Directory Traversal input to the URL's GET request while connecting to the remote server port specified during setup, an attacker can retrieve local operating system files from the remote system.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 70% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2023-12-07
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

buddho:etcd_browser

References

http://seclists.org/fulldisclosure/2023/Nov/11
http://seclists.org/fulldisclosure/2023/Nov/9
https://hub.docker.com/r/buddho/etcd-browser
https://hub.docker.com/r/buddho/etcd-browser/tags
http://seclists.org/fulldisclosure/2023/Nov/11

Check your stack JSON