In Reactor Netty HTTP Server, versions 1.1.x prior to 1.1.13 and versions 1.0.x prior to 1.0.39, a malicious user can send a request using a specially crafted URL that can lead to a directory traversal attack.

Specifically, an application is vulnerable if Reactor Netty HTTP Server is configured to serve static resources.

Published: 2023-11-15

CVSS: 7.5

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Download Exploit for CVE-2023-34062 here:

Use Tor Browser to access .onion links.

Check our team here:

https://tatramed.sk/exploit-509-cve-2024-22243/

https://tatramed.sk/exploit-451-cve-2025-22869/

https://tatramed.sk/exploit-515-cve-2014-1776/

https://tatramed.sk/exploit-103-cve-2022-37969/

https://tatramed.sk/exploit-648-cve-2005-1794/