Vulnerabilities > CVE-2023-50265 - Unspecified vulnerability in Bazarr

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

network

low complexity

bazarr

NVD

Published: 2023-12-15

Updated: 2024-11-21

Summary

Bazarr manages and downloads subtitles. Prior to 1.3.1, the /api/swaggerui/static endpoint in bazarr/app/ui.py does not validate the user-controlled filename variable and uses it in the send_file function, which leads to an arbitrary file read on the system. This issue is fixed in version 1.3.1.

Vulnerable Configurations

Part	Description	Count
Application	Bazarr Bazarr Bazarr - Bazarr Bazarr 0.6.0 Bazarr Bazarr 0.6.1 Bazarr Bazarr 0.6.2 Bazarr Bazarr 0.6.3 Bazarr Bazarr 0.6.4 Bazarr Bazarr 0.6.5 Bazarr Bazarr 0.6.6 Bazarr Bazarr 0.6.6.1 Bazarr Bazarr 0.6.6.2 Bazarr Bazarr 0.6.6.3 Bazarr Bazarr 0.6.7 Bazarr Bazarr 0.6.7.1 Bazarr Bazarr 0.6.8 Bazarr Bazarr 0.6.9 Bazarr Bazarr 0.6.9.1 Bazarr Bazarr 0.7.0 Bazarr Bazarr 0.7.0.1 Bazarr Bazarr 0.7.0.2 Bazarr Bazarr 0.7.0.3 Bazarr Bazarr 0.7.0.4 Bazarr Bazarr 0.7.0.5 Bazarr Bazarr 0.7.1 Bazarr Bazarr 0.7.2 Bazarr Bazarr 0.7.2.1 Bazarr Bazarr 0.7.3 Bazarr Bazarr 0.7.4 Bazarr Bazarr 0.7.5 Bazarr Bazarr 0.7.5.1 Bazarr Bazarr 0.8 Bazarr Bazarr 0.8.1 Bazarr Bazarr 0.8.2 Bazarr Bazarr 0.8.2.1 Bazarr Bazarr 0.8.2.2 Bazarr Bazarr 0.8.2.3 Bazarr Bazarr 0.8.2.4 Bazarr Bazarr 0.8.3 Bazarr Bazarr 0.8.3.1 Bazarr Bazarr 0.8.3.2 Bazarr Bazarr 0.8.3.3 Bazarr Bazarr 0.8.3.4 Bazarr Bazarr 0.8.4 Bazarr Bazarr 0.8.4.1 Bazarr Bazarr 0.8.4.2 Bazarr Bazarr 0.8.4.3 Bazarr Bazarr 0.8.4.4 Bazarr Bazarr 0.9 Bazarr Bazarr 0.9.0.1 Bazarr Bazarr 0.9.0.2 Bazarr Bazarr 0.9.0.3 Bazarr Bazarr 0.9.0.4 Bazarr Bazarr 0.9.0.5 Bazarr Bazarr 0.9.0.6 Bazarr Bazarr 0.9.0.7 Bazarr Bazarr 0.9.0.8 Bazarr Bazarr 0.9.1 Bazarr Bazarr 0.9.1.1 Bazarr Bazarr 0.9.2 Bazarr Bazarr 0.9.3 Bazarr Bazarr 0.9.4 Bazarr Bazarr 0.9.5 Bazarr Bazarr 0.9.6 Bazarr Bazarr 0.9.7 Bazarr Bazarr 0.9.8 Bazarr Bazarr 0.9.9 Bazarr Bazarr 0.9.10 Bazarr Bazarr 1.0.0 Bazarr Bazarr 1.0.1 Bazarr Bazarr 1.0.2 Bazarr Bazarr 1.0.3 Bazarr Bazarr 1.0.4 Bazarr Bazarr 1.0.5 Bazarr Bazarr 1.1.0 Bazarr Bazarr 1.1.1 Bazarr Bazarr 1.1.2 Bazarr Bazarr 1.1.3 Bazarr Bazarr 1.1.4 Bazarr Bazarr 1.1.5 Bazarr Bazarr 1.2.0 Bazarr Bazarr 1.2.1 Bazarr Bazarr 1.2.2 Bazarr Bazarr 1.2.3 Bazarr Bazarr 1.2.4 Bazarr Bazarr 1.2.5 Bazarr Bazarr 1.3.0	572

Summary

Vulnerable Configurations

References