What is CVE-2023-39916?

CVE-2023-39916 is a critical-severity vulnerability in Nlnet Labs Routinator, classified under Path Traversal: '.../...//'. CVSS score: 9.3/10. Published 2023-09-13.

How severe is CVE-2023-39916?

Critical severity. CVSS v3 base score is 9.3 out of 10.

Path Traversal in Nlnet Labs Routinator

CVE-2023-39916

NLnet Labs’ Routinator 0.9.0 up to and including 0.12.1 as well as 0.14.0 up to and including 0.14.2 contains a possible path traversal vulnerability in the optional, off-by-default keep-rrdp-responses feature that allows users to store th…

EPSS: 0.005 (41.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.3 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:H.

Affected products

Nlnet Labs Routinator — versions 0.9.0, 0.14.*
Nlnetlabs Routinator

Weakness classification (CWE)

CWE-35 — Path Traversal: '.../...//'
CWE-22 — Path Traversal

References

sep@nlnetlabs.nl (vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2023-39916?: CVE-2023-39916 is a critical-severity vulnerability in Nlnet Labs Routinator, classified under Path Traversal: '.../...//'. CVSS score: 9.3/10. Published 2023-09-13.
How severe is CVE-2023-39916?: Critical severity. CVSS v3 base score is 9.3 out of 10.