CVE-2023-50264 Bazarr Arbitrary file read in /system/backup/download/ endpoint
Attackers can read arbitrary files from the server via the backup download endpoint due to lack of filename validation.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-50264?
CVE-2023-50264 is a high-severity path traversal vulnerability in morpheus65535 bazarr, published on 15 Dec 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Bazarr manages and downloads subtitles. Prior to 1.3.1, Bazarr contains an arbitrary file read in /system/backup/download/ endpoint in bazarr/app/ui.py does not validate the user-controlled filename variable and uses it in the send_file function, which leads to an arbitrary file read on the system. This issue is fixed in version 1.3.1.
Weakness: CWE-22
Which versions are affected by CVE-2023-50264?
It affects 1 product.
Products include Bazarr Bazarr.
How do I fix CVE-2023-50264?
No fix has been published for CVE-2023-50264 yet. Limit exposure of the affected software until one is available.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2023-50264 being exploited?
There is no known exploitation of CVE-2023-50264 in the wild and no public exploit code.