CVE-2023-47890
Path traversal in Pyload
CVSS score
8.8
EPSS probability
%1.1
Risk score
0.1
Published
2 y ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
https://github.com/pyload/pyload/security/advisories/GHSA-h73m-pcfw-25h2
Makefile Go / Python
Similar Vulnerabilities
6.5
CVE-2026-48987
pyLoad: Unbounded Memory Growth Leading to DoS and Potential DDoS in EventManager
P
WorkaroundEPSS %0
6.5
CVE-2026-48484
pyLoad: Lack of Input Size Validation Leads to Denial of Service (DoS) and Process Termination
P
Patch status unknownEPSS %0
5.3
CVE-2026-75597
pyLoad: Unauthenticated access to /web/<path:filename> bypasses authentication on sensitive templates and leaks internal error details via exception attribute typo
P
Patch status unknownEPSS %0
4.9
CVE-2026-48737
pyLoad: SSRF guard bypass via IPv6 6to4/NAT64 transition wrappers of internal IPs
P
WorkaroundEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2023-47890"