CVE-2023-27534
HIGH
MEDIUM
Priority: 0.21
BB Relevance:
68/100
Published: 2023-03-30
Modified: 2026-10-23
First seen: 2026-10-29
Status: active
Attack Surface
Network
Low Complexity
No Interaction
Conf. Impact
Integ. Impact
CVSS Vector Breakdown
AV:
Network
AC:
Low
PR:
Low
UI:
None
S:
Unchanged
C:
High
I:
High
A:
High
Description
A path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~) character to be wrongly replaced when used as a prefix in the first path element, in addition to its intended use as the first element to indicate a path relative to the user's home directory. Attackers can exploit this flaw to bypass filtering or execute arbitrary code by crafting a path like /~2/foo while accessing a server with a specific user.
Weakness Classification (1)
Affected Software (11)
| Vendor | Product | Version |
|---|---|---|
| broadcom | brocade_fabric_operating_system_firmware | - |
| fedoraproject | fedora | 36 |
| haxx | curl | 7.18.0 – 7.88.1 |
| netapp | active_iq_unified_manager | - |
| netapp | h300s_firmware | - |
| netapp | h410s_firmware | - |
| netapp | h500s_firmware | - |
| netapp | h700s_firmware | - |
| splunk | universal_forwarder | 8.2.0 – 8.2.12 |
| splunk | universal_forwarder | 9.0.0 – 9.0.6 |
| splunk | universal_forwarder | 9.1.0 |
References & Advisories (8)
Third Party Advisory
Third Party Advisory
Mailing List
Third Party Advisory
Mailing List
Third Party Advisory
Exploit
Third Party Advisory