copyparty project vulnerabilities

Products

• copyparty 2

Latest copyparty project CVEs

Newest publication first

1. CVE-2023-38501 copyparty vulnerable to reflected cross-site scripting via k304 parameter

   Published 2023-07-25

   Medium·CVSS 6.1 EPSS 9.2% Public exploit

   copyparty is file server software. Prior to version 1.8.7, the application contains a reflected cross-site scripting via URL-parameter ?k304=... and ?setck=.... The worst-case outcome of this is being able to move or delete existing files on the server, or upload new files, using...

2. CVE-2023-37474 Path traversal in copyparty

   Published 2023-07-14

   High·CVSS 7.5 EPSS 44.9% Public exploit

   Copyparty is a portable file server. Versions prior to 1.8.2 are subject to a path traversal vulnerability detected in the .cpr subfolder. The Path Traversal attack technique allows an attacker access to files, directories, and commands that reside outside the web document root d...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.