Copyparty is a portable file server. Versions prior to 1.8.2 are subject to a path traversal vulnerability detected in the `.cpr` subfolder. The Path Traversal attack technique allows an attacker access to files, directories, and commands that reside outside the web document root directory. This issue has been addressed in commit `043e3c7d` which has been included in release 1.8.2. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N9001 Copyparty
APP9001< 1.8.2
Related vulnerabilities
Cross Site Scripting vulnerability in copyparty before 1.9.2 allows a local attacker to execute arbitrary code...
Copyparty is a portable file server. Versions prior to 1.18.9, the filter parameter for the "Recent Uploads" p...
Copyparty is a portable file server. Prior to v1.20.11., the nohtml config option, intended to prevent executi...
Copyparty is a portable file server. In versions prior to 1.20.9, an XSS allows for reflected cross-site scrip...
Copyparty is a portable file server. In versions prior to 1.19.8, there was a missing permission-check in the ...