CVE-2023-39141

high

Description

webui-aria2 commit 4fe2e was discovered to contain a path traversal vulnerability.

References

https://github.com/JafarAkhondali/cve-and-cybersec-research

https://github.com/MartiSabate/CVE-2023-39141-LFI-enumerator

https://github.com/codeb0ss/CVE-2023-39141-PoC

https://github.com/ziahamza/webui-aria2/blob/109903f0e2774cf948698cd95a01f77f33d7dd2c/node-server.js#L10

https://gist.github.com/JafarAkhondali/528fe6c548b78f454911fb866b23f66e

Details

Source: Mitre, NVD

Published: 2023-08-22

Updated: 2026-06-17

Risk Information

CVSS v2

Base Score: 7.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:N/A:N

Severity: High

CVSS v3

Base Score: 7.5

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Severity: High

EPSS

EPSS: 0.03051