CVE-2023-50264

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Bazarr manages and downloads subtitles. Prior to 1.3.1, Bazarr contains an arbitrary file read in /system/backup/download/ endpoint in bazarr/app/ui.py does not validate the user-controlled filename variable and uses it in the send_file function, which leads to an arbitrary file read on the system. This issue is fixed in version 1.3.1.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-22

Affected software

Vendor	Product	Versions
morpheus65535	bazarr	< 1.3.1

References

https://github.com/morpheus65535/bazarr/commit/17add7fbb3ae1919a40d505470d499d46df9ae6bPatch
https://github.com/morpheus65535/bazarr/releases/tag/v1.3.1Release Notes
https://securitylab.github.com/advisories/GHSL-2023-192_GHSL-2023-194_bazarr/Exploit, Third Party Advisory
https://github.com/morpheus65535/bazarr/commit/17add7fbb3ae1919a40d505470d499d46df9ae6bPatch
https://github.com/morpheus65535/bazarr/releases/tag/v1.3.1Release Notes
https://securitylab.github.com/advisories/GHSL-2023-192_GHSL-2023-194_bazarr/Exploit, Third Party Advisory

Timeline

Published: Dec 15, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-502657.5Bazarr manages and downloads subtitles. Prior to 1.3.1, the /api/swaggerui/static endpoint in bazarr/app/ui.py does not validate the user-co CVE-2023-502665.3Bazarr manages and downloads subtitles. In version 1.2.4, the proxy method in bazarr/bazarr/app/ui.py does not validate the user-controlled CVE-2023-502674.3MeterSphere is a one-stop open source continuous testing platform. Prior to 2.10.10-lts, the authenticated attackers can update resources wh CVE-2023-502685.5jq is a command-line JSON processor. Version 1.7 is vulnerable to stack-based buffer overflow in builds using decNumber. Version 1.7.1 conta CVE-2023-502697.5Squid is a caching proxy for the Web. Due to an Uncontrolled Recursion bug in versions 2.6 through 2.7.STABLE9, versions 3.1 through 5.9, an CVE-2023-50277.5A vulnerability classified as critical was found in SourceCodester Simple Membership System 1.0. Affected by this vulnerability is an unknow CVE-2023-502706.5Session Fixation Apache DolphinScheduler before version 3.2.0, which session is still valid after the password change. Users are recommende CVE-2023-502717.5A potential security vulnerability has been identified with HP-UX System Management Homepage (SMH). This vulnerability could be exploited lo CVE-2023-502729.8A potential security vulnerability has been identified in HPE Integrated Lights-Out 5 (iLO 5) and Integrated Lights-Out 6 (iLO 6). The vulne CVE-2023-502747.8HPE OneView may allow command injection with local privilege escalation.CVE-2023-502757.5HPE OneView may allow clusterService Authentication Bypass resulting in denial of service.CVE-2023-50284.6A vulnerability, which was classified as problematic, has been found in China Unicom TEWA-800G 4.16L.04_CT2015_Yueme. Affected by this issue