Staging Environment: Content and features may be unstable or change without notice.

Advisory Package Curation

CVE-2023-28458

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-23fx-92m6-4f2g

pretalx allows path traversal in HTML export pretalx 2.3.1 before 2.3.2 allows path traversal in HTML export (a non-default feature). Organizers can trigger the overwriting (with the standard pretalx 404 page content) of an arbitrary file.

gitlab/pypi/pretalx/CVE-2023-28458

pretalx allows path traversal in HTML export pretalx 2.3.1 before 2.3.2 allows path traversal in HTML export (a non-default feature). Organizers can trigger the overwriting (with the standard pretalx 404 page content) of an arbitrary file.

pypa/pretalx/PYSEC-2023-40

pretalx 2.3.1 before 2.3.2 allows path traversal in HTML export (a non-default feature). Organizers can trigger the overwriting (with the standard pretalx 404 page content) of an arbitrary file.

pysec/PYSEC-2023-40

pretalx 2.3.1 before 2.3.2 allows path traversal in HTML export (a non-default feature). Organizers can trigger the overwriting (with the standard pretalx 404 page content) of an arbitrary file.