CVE-2023-35843

Summary

CVE-2023-35843 is a newly discovered vulnerability affecting NocoDB versions 0.106.0 and 0.109.1. This issue involves a path traversal flaw in the /download route, which an unauthenticated attacker can exploit by manipulating the path parameter. Successful exploitation grants the attacker access to arbitrary files on the server. Sensitive files and data, including configuration files, source code, and other confidential information, are at risk of being exposed.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.