CVE-2023-34062 (published 2023-11-15T09:46:42.975Z)
In Reactor Netty HTTP Server, versions 1.1.x prior to 1.1.13 and versions 1.0.x prior to 1.0.39, a malicious user can send a request using a specially crafted URL that can lead to a directory traversal attack.

Specifically, an application is vulnerable if Reactor Netty HTTP Server is configured to serve static resources.



Affected products: Vendor: n/a
Product: Reactor Netty
Versions: 1.1.0, 1.0.0, older unsupported versions