What’s Vulnerable › Vulnerabilities
CVE-2023-0745: Arbitrary File Write in High Availability Backup Upload
- Severity: critical (CVSS 9.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.5% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2023-02-09 · updated 2026-10-28
- Weakness: CWE-23
Description
The High Availability functionality of Yugabyte Anywhere can be abused to write arbitrary files through the backup upload endpoint by using path traversal characters. This vulnerability is associated with program files PlatformReplicationManager.Java. This issue affects YugabyteDB Anywhere: from 2.0.0.0 through 2.13.0.0
Affected products
- YugabyteDB Anywhere: from 2.0 through 2.13
References
Get alerted when CVE-2023-0745 or the next vulnerability affects your stack