CVE-2023-5588

A vulnerability was found in kphrx pleroma. It has been classified as problematic. This affects the function Pleroma.Emoji.Pack of the file lib/pleroma/emoji/pack.ex. The manipulation of the argument name leads to path traversal. The complexity of an attack is rather high. The exploitability is told to be difficult. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The patch is named 2c795094535537a8607cc0d3b7f076a609636f40. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-242187.

• CWE-22

• https://github.com/kphrx/pleroma/commit/2c795094535537a8607cc0d3b7f076a609636f40Patch
• https://github.com/kphrx/pleroma/pull/197Patch, Vendor Advisory
• https://vuldb.com/?ctiid.242187Permissions Required, Third Party Advisory
• https://vuldb.com/?id.242187Third Party Advisory
• https://github.com/kphrx/pleroma/commit/2c795094535537a8607cc0d3b7f076a609636f40Patch
• https://github.com/kphrx/pleroma/pull/197Patch, Vendor Advisory
• https://vuldb.com/?ctiid.242187Permissions Required, Third Party Advisory
• https://vuldb.com/?id.242187Third Party Advisory

Published

Oct 15, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-5582A vulnerability, which was classified as problematic, has be…5.4
• CVE-2023-5583The WP Simple Galleries plugin for WordPress is vulnerable t…8.8
• CVE-2023-5584Rejected reason: We have rejected this CVE as it was determi…
• CVE-2023-5585A vulnerability was found in SourceCodester Online Motorcycl…6.1
• CVE-2023-5586NULL Pointer Dereference in GitHub repository gpac/gpac prio…7.8
• CVE-2023-5587A vulnerability was found in SourceCodester Free Hospital Ma…9.8
• CVE-2023-5589A vulnerability was found in SourceCodester Judging Manageme…9.8
• CVE-2023-5590NULL Pointer Dereference in GitHub repository seleniumhq/sel…7.5
• CVE-2023-5591 SQL Injection in GitHub repository librenms/librenms prior …6.5
• CVE-2023-5592Download of Code Without Integrity Check vulnerability in PH…7.5
• CVE-2023-5593The out-of-bounds write vulnerability in the Windows-based S…7.8
• CVE-2023-5594Improper validation of the server’s certificate chain in sec…8.6