Executive brief
Velociraptor subject to Path Traversal in www.velocidex.com/golang/velociraptor
Affected products
- Go www.velocidex.com/golang/velociraptor
Junglewise Threat Intelligence
CVE-2023-0290: GO-2023-1502 - Velociraptor subject to Path Traversal in www.velocidex.com/golang/velociraptor
CVE-2023-0290 · Severity: low · CVSS 3.1 · Published 2024-08-20
Technologies: www.velocidex.com/golang/velociraptor (Go). Vendors: Go.
Related threats
- Velocidex Velociraptor authorization bypass in HTTP API
- Velocidex Velociraptor authorization bypass in GetUserRoles API
- Velocidex Velociraptor denial of service in EVTX parser
- Velociraptor vulnerability in the query() plugin which allows access to all orgs with the user's current ACL token
- GO-2025-3768 - Velociraptor vulnerable to privilege escalation via UpdateConfig artifact in www.velocidex.com/golang/velociraptor