~/products/shokoanime/shokoserver

pipeline liveDigest Docs

Shokoanime Shokoserver vulnerabilities

1 known vulnerability affecting shokoanime/shokoserver.

Total CVEs

1

CISA KEV

0

Public exploits

1

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

SortPage 1 of 1

CVE-2023-43662P2HIGHCVSS 8.6PoC≤ 4.2.22023-09-28

CVE-2023-43662 [HIGH] CWE-22 CVE-2023-43662: ShokoServer is a media server which specializes in organizing anime. In affected versions the `/api/ ShokoServer is a media server which specializes in organizing anime. In affected versions the `/api/Image/WithPath` endpoint is accessible without authentication and is supposed to return default server images. The endpoint accepts the parameter `serverImagePath`, which is not sanitized in any way before being passed to `System.IO.File.OpenRead`, which