CVE-2023-37474

CVE-2023-37474 is a path traversal vulnerability affecting Copyparty, a portable file server, in versions prior to 1.8.2. This flaw allows an unauthenticated attacker to access files and directories outside the intended web document root. With a CVSS score of 7.5 (High), the vulnerability is easily exploitable over the network with no user interaction, potentially leading to high confidentiality impact. While there is no evidence of active exploitation or Metasploit modules, a Nuclei template exists, and the vulnerability has a high EPSS score, indicating a significant likelihood of future exploitation. Users are strongly advised to upgrade to version 1.8.2 or later, as no workarounds are available.