CVE-2023-0745

Full vulnerability record from the local CVENow database.

Description

The High Availability functionality of Yugabyte Anywhere can be abused to write arbitrary files through the backup upload endpoint by using path traversal characters. This vulnerability is associated with program files PlatformReplicationManager.Java. This issue affects YugabyteDB Anywhere: from 2.0.0.0 through 2.13.0.0

Severity

CRITICAL

CVSS score

9.8 (v3.1)

Vulnerability status

Modified

Source identifier

[email protected]

Published

2023-02-09 17:15:16.553000

Last modified

2026-10-28 19:10:00.193000

View original CVE JSON

{
  "id": "CVE-2023-0745",
  "sourceIdentifier": "[email protected]",
  "published": "2023-02-09T17:15:16.553",
  "lastModified": "2026-10-28T19:10:00.193",
  "vulnStatus": "Modified",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "\n\t\n\t\t\n\t\t\n\t\n\t\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\tThe High Availability functionality of Yugabyte Anywhere can be abused to write arbitrary\nfiles through the backup upload endpoint by using path traversal characters.\n\n\n\n\t\t\t\t\n\n\n\t\t\t\n\n\n\t\t\n\n\n\t\n This vulnerability is associated with program files PlatformReplicationManager.Java.\n\nThis issue affects YugabyteDB Anywhere: from 2.0.0.0 through 2.13.0.0\n\n"
    },
    {
      "lang": "es",
      "value": "La funcionalidad de Alta Disponibilidad de Yugabyte Anywhere puede ser abusada para escribir archivos arbitrarios a través del punto final de carga de copias de seguridad utilizando caracteres de salto de ruta.\n\nEsta vulnerabilidad está asociada con los archivos de programa PlatformReplicationManager.Java.\n\nEste problema afecta a YugabyteDB Anywhere: desde 2.0.0.0 hasta 2.13.0.0"
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "YugabyteDB",
          "product": "YugabyteDB Anywhere",
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux",
            "Docker",
            "Kubernetes"
          ],
          "versions": [
            {
              "version": "2.0",
              "lessThanOrEqual": "2.13",
              "versionType": "2.0 to 2.13",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
          "baseScore": 6.7,
          "baseSeverity": "MEDIUM",
          "attackVector": "LOCAL",
          "attackComplexity": "LOW",
          "privilegesRequired": "HIGH",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 0.8,
        "impactScore": 5.9
      },
      {
        "source": "[email protected]",
        "type": "Primary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "baseScore": 9.8,
          "baseSeverity": "CRITICAL",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.9
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2025-03-24T17:33:21.113674Z",
          "id": "CVE-2023-0745",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-23"
        }
      ]
    },
    {
      "source": "[email protected]",
      "type": "Primary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-22"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:yugabyte:yugabytedb_managed:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "2.0",
              "versionEndIncluding": "2.13",
              "matchCriteriaId": "6DEE1FF6-1847-4B84-ABB4-51DC13A43FAA"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://www.yugabyte.com/",
      "source": "[email protected]",
      "tags": [
        "Product"
      ]
    },
    {
      "url": "https://www.yugabyte.com/",
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Product"
      ]
    }
  ]
}