CyberRota Analysis
AI-GeneratedCopyparty versions prior to 1.20.17 are vulnerable due to a flaw that allows a valid file key to be converted into a directory key when specific directory and file key flags are enabled, potentially granting unauthorized read access to the containing folder. This vulnerability poses a medium risk, particularly for users who have explicitly enabled these flags. Organizations utilizing Copyparty for file sharing should prioritize upgrading to version 1.20.17 to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Copyparty is a portable file server. Prior to 1.20.17, copyparty volumes with the dk or dks directory-key flag combined with the fk or fka file-key flag can convert a valid file key into a directory key, granting read access to the containing folder. This vulnerability was only reachable if both types of keys (filekeys and dirkeys) were manually enabled in the volume flags simultaneously. This issue is fixed in version 1.20.17.