CVE-2023-0745

The High Availability functionality of Yugabyte Anywhere can be abused to write arbitrary files through the backup upload endpoint by using path traversal characters. This vulnerability is associated with program files PlatformReplicationManager.Java. This issue affects YugabyteDB Anywhere: from 2.0.0.0 through 2.13.0.0

CVSS v3 6.7 MEDIUM

6.7^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 0.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://www.yugabyte.com/	Product
https://www.yugabyte.com/	Product

Configurations

Configuration 1 (hide)

cpe:2.3:a:yugabyte:yugabytedb_managed:*:*:*:*:*:*:*:*

History

28 Oct 2026, 19:10

Type	Values Removed	Values Added
Summary		(es) La funcionalidad de Alta Disponibilidad de Yugabyte Anywhere puede ser abusada para escribir archivos arbitrarios a través del punto final de carga de copias de seguridad utilizando caracteres de salto de ruta. Esta vulnerabilidad está asociada con los archivos de programa PlatformReplicationManager.Java. Este problema afecta a YugabyteDB Anywhere: desde 2.0.0.0 hasta 2.13.0.0

Information

Published : 2023-02-09 17:15

Updated : 2026-10-28 19:10

NVD link : CVE-2023-0745

Mitre link : CVE-2023-0745

CVE.ORG link : CVE-2023-0745

JSON object : View

Products Affected

yugabyte

yugabytedb_managed

CWE

CWE-23

Relative Path Traversal

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

{"id": "CVE-2023-0745", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2023-0745", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-03-24T17:33:21.113674Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security@yugabyte.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.7, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 0.8}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "affected": [{"source": "security@yugabyte.com", "affectedData": [{"vendor": "YugabyteDB", "product": "YugabyteDB Anywhere", "versions": [{"status": "affected", "version": "2.0", "versionType": "2.0 to 2.13", "lessThanOrEqual": "2.13"}], "platforms": ["Linux", "Docker", "Kubernetes"], "defaultStatus": "unaffected"}]}], "published": "2023-02-09T17:15:16.553", "references": [{"url": "https://www.yugabyte.com/", "tags": ["Product"], "source": "security@yugabyte.com"}, {"url": "https://www.yugabyte.com/", "tags": ["Product"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "security@yugabyte.com", "description": [{"lang": "en", "value": "CWE-23"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-22"}]}], "descriptions": [{"lang": "en", "value": "\n\t\n\t\t\n\t\t\n\t\n\t\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\tThe High Availability functionality of Yugabyte Anywhere can be abused to write arbitrary\nfiles through the backup upload endpoint by using path traversal characters.\n\n\n\n\t\t\t\t\n\n\n\t\t\t\n\n\n\t\t\n\n\n\t\n This vulnerability is associated with program files PlatformReplicationManager.Java.\n\nThis issue affects YugabyteDB Anywhere: from 2.0.0.0 through 2.13.0.0\n\n"}, {"lang": "es", "value": "La funcionalidad de Alta Disponibilidad de Yugabyte Anywhere puede ser abusada para escribir archivos arbitrarios a trav\u00e9s del punto final de carga de copias de seguridad utilizando caracteres de salto de ruta.\n\nEsta vulnerabilidad est\u00e1 asociada con los archivos de programa PlatformReplicationManager.Java.\n\nEste problema afecta a YugabyteDB Anywhere: desde 2.0.0.0 hasta 2.13.0.0"}], "lastModified": "2026-10-28T19:10:00.193", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:yugabyte:yugabytedb_managed:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6DEE1FF6-1847-4B84-ABB4-51DC13A43FAA", "versionEndIncluding": "2.13", "versionStartIncluding": "2.0"}], "operator": "OR"}]}], "sourceIdentifier": "security@yugabyte.com"}