{"id":"CVE-2023-28458","aliases":["EUVD-2023-0205","GHSA-23fx-92m6-4f2g","PYSEC-2023-40"],"status":"published","title":"pretalx allows path traversal in HTML export","description":"pretalx 2.3.1 before 2.3.2 allows path traversal in HTML export (a non-default feature). Organizers can trigger the overwriting (with the standard pretalx 404 page content) of an arbitrary file.","severity":{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.03429,"percentile":0.89023,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-22"],"published":"2023-04-20T00:00:00Z","modified":"2026-10-28T02:30:31Z","exploits":[{"source":"metasploit","id":"auxiliary/scanner/http/pretalx_file_read_cve_2023_28459","title":"Pretalx Arbitrary File Read/Limited File Write","type":"auxiliary","date":"2023-03-07","verified":true,"url":"https://www.rapid7.com/db/modules/auxiliary/scanner/http/pretalx_file_read_cve_2023_28459"},{"source":"metasploit","id":"exploit/linux/http/pretalx_rce_cve_2023_28458","title":"Pretalx Limited File Write to Remote Code Execution","type":"exploit","platform":"Linux,Unix","date":"2023-03-07","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/linux/http/pretalx_rce_cve_2023_28458"}],"fixes":[{"ecosystem":"PyPI","package":"pretalx","fixed_in":["2.3.2"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"pretalx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.3.1"},{"fixed":"2.3.2"}]}]},{"source":"osv","ecosystem":"PyPI","package":"pretalx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.3.1"},{"fixed":"2.3.2"}]}],"versions":["2.3.1"]},{"source":"osv","ecosystem":"PyPI","package":"pretalx","ranges":[{"type":"GIT","events":[{"introduced":"0"},{"fixed":"60722c43cf975f319e94102e6bff320723776890"}]},{"type":"ECOSYSTEM","events":[{"introduced":"2.3.1"},{"fixed":"2.3.2"}]}],"versions":["2.3.1","v2.3.1","v2.3.0","v2.2.0","v2.1.1","v2.1.0","v2.0.0","v1.1.0","v1.0.0","v0.9.0","v0.8.0","v0.7.1","v0.7.0","v0.6.1","v0.6.0","v0.5.0","v0.4.1","v0.4.0","v0.3.1","v0.3.0","v0.2.2","v0.2.1","v0.2.0","v0.1.0"]}],"products":[{"vendor":"pretalx","product":"pretalx"}],"references":[{"url":"https://pretalx.com/p/news/security-release-232/","tags":["x_transferred","Vendor Advisory","web"]},{"url":"https://github.com/pretalx/pretalx/commit/60722c43cf975f319e94102e6bff320723776890","tags":["x_transferred","Patch","fix","web"]},{"url":"https://github.com/pretalx/pretalx/releases/tag/v2.3.2","tags":["x_transferred","Release Notes","web"]},{"url":"https://www.sonarsource.com/blog/pretalx-vulnerabilities-how-to-get-accepted-at-every-conference/","tags":["x_transferred","Exploit","Patch","Third Party Advisory","article"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-28458","tags":["advisory"]},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/pretalx/PYSEC-2023-40.yaml","tags":["web"]},{"url":"https://pretalx.com/p/news/security-release-232","tags":["web"]},{"url":"https://www.sonarsource.com/blog/pretalx-vulnerabilities-how-to-get-accepted-at-every-conference","tags":["web"]},{"url":"https://github.com/advisories/GHSA-23fx-92m6-4f2g","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/28xxx/CVE-2023-28458.json","tags":["advisory"]},{"url":"https://github.com/pretalx/pretalx","tags":["package"]}],"sources":{"cve":[{"id":"CVE-2023-28458","description":"pretalx 2.3.1 before 2.3.2 allows path traversal in HTML export (a non-default feature). Organizers can trigger the overwriting (with the standard pretalx 404 page content) of an arbitrary file.","status":"published","published":"2023-04-20T00:00:00Z","modified":"2025-02-05T16:16:19.399Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:35:32.376766Z"}],"euvd":[{"id":"EUVD-2023-0205","description":"pretalx 2.3.1 before 2.3.2 allows path traversal in HTML export (a non-default feature). Organizers can trigger the overwriting (with the standard pretalx 404 page content) of an arbitrary file.","status":"published","published":"2023-04-20T00:00:00Z","modified":"2025-02-05T16:16:19Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-03T00:04:05.079502Z"}],"ghsa":[{"id":"GHSA-23fx-92m6-4f2g","title":"pretalx allows path traversal in HTML export","description":"pretalx 2.3.1 before 2.3.2 allows path traversal in HTML export (a non-default feature). Organizers can trigger the overwriting (with the standard pretalx 404 page content) of an arbitrary file.","status":"published","published":"2023-04-20T21:33:27Z","modified":"2024-10-21T20:08:40Z","cvss":[{"version":"4.0","score":5.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N","level":"medium"},{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:38:12.325695Z"}],"nvd":[{"id":"CVE-2023-28458","description":"pretalx 2.3.1 before 2.3.2 allows path traversal in HTML export (a non-default feature). Organizers can trigger the overwriting (with the standard pretalx 404 page content) of an arbitrary file.","status":"published","published":"2023-04-20T21:15:08.77Z","modified":"2026-06-17T05:47:46.913Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"primary"},{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:07:56.683259Z"}],"osv":[{"id":"CVE-2023-28458","description":"pretalx 2.3.1 before 2.3.2 allows path traversal in HTML export (a non-default feature). Organizers can trigger the overwriting (with the standard pretalx 404 page content) of an arbitrary file.","status":"published","published":"2023-04-20T00:00:00Z","modified":"2026-10-28T02:30:31.033449401Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:31.468318Z"},{"id":"GHSA-23fx-92m6-4f2g","title":"pretalx allows path traversal in HTML export","description":"pretalx 2.3.1 before 2.3.2 allows path traversal in HTML export (a non-default feature). Organizers can trigger the overwriting (with the standard pretalx 404 page content) of an arbitrary file.","status":"published","published":"2023-04-20T21:33:27Z","modified":"2024-10-21T20:26:29.526471Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium"},{"version":"4.0","score":5.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N","level":"medium"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T15:46:33.520522Z"},{"id":"PYSEC-2023-40","description":"pretalx 2.3.1 before 2.3.2 allows path traversal in HTML export (a non-default feature). Organizers can trigger the overwriting (with the standard pretalx 404 page content) of an arbitrary file.","status":"published","published":"2023-04-20T21:15:00Z","modified":"2026-06-10T17:01:44.279579461Z","updated_at":"2026-11-02T15:52:53.837392Z"}]}}