CVE-2023-37474 Scanner
Targets the .cpr subfolder endpoint in Copyparty versions up to 1.8.2, allowing attackers to read arbitrary files outside the web root via path manipulation.
Used 2.1k times · 3.4k assets checked · url
CVE
CVE-2023-37474
7.5
CVSShigh
Exploitable remotely over the internet · no authentication required.
Description
Copyparty is a portable file server. Versions prior to 1.8.2 are subject to a path traversal vulnerability detected in the `.cpr` subfolder. The Path Traversal attack technique allows an attacker access to files, directories, and commands that reside outside the web document root directory. This issue has been addressed in commit `043e3c7d` which has been included in release 1.8.2. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Attack Vector
Network
Privileges Req.
None
User Interaction
None
copyparty
Updated Sep 28, 2026View on NVD →
S4E scanner
CVE history: copyparty
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →