CVE-2023-29004

hap-wi/roxy-wi is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. A Path Traversal vulnerability was found in the current version of Roxy-WI (6.3.9.0 at the moment of writing this report). The vulnerability can be exploited via an HTTP request to /app/options.py and the config_file_name parameter. Successful exploitation of this vulnerability could allow an attacker with user level privileges to obtain the content of arbitrary files on the file server within the scope of what the server process has access to. The root-cause of the vulnerability lies in the get_config function of the /app/modules/config/config.py file, which only checks for relative path traversal, but still allows to read files from absolute locations passed via the config_file_name parameter.

• CWE-22

• https://github.com/hap-wi/roxy-wi/security/advisories/GHSA-7qqj-xhvr-46fvExploit, Vendor Advisory
• https://github.com/hap-wi/roxy-wi/security/advisories/GHSA-7qqj-xhvr-46fvExploit, Vendor Advisory

Published

Apr 17, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-28999Nextcloud is an open-source productivity platform. In Nextcl…6.4
• CVE-2023-2900A vulnerability was found in NFine Rapid Development Platfor…7.5
• CVE-2023-29000The Nextcloud Desktop Client is a tool to synchronize files …6.5
• CVE-2023-29001Contiki-NG is an open-source, cross-platform operating syste…7.5
• CVE-2023-29002Cilium is a networking, observability, and security solution…6.3
• CVE-2023-29003SvelteKit is a web development framework. The SvelteKit fram…8.8
• CVE-2023-29005Flask-AppBuilder versions before 4.3.0 lack rate limiting wh…7.5
• CVE-2023-29006The Order GLPI plugin allows users to manage order managemen…8.8
• CVE-2023-29007Git is a revision control system. Prior to versions 2.30.9, …7.8
• CVE-2023-29008The SvelteKit framework offers developers an option to creat…8.8
• CVE-2023-29009baserCMS is a website development framework with WebAPI that…6.1
• CVE-2023-2901A vulnerability was found in NFine Rapid Development Platfor…6.5