Exploit for Path Traversal in Aiohttp

CVE-2024-23334

githubexploit · 2026-08-18

Description

Path traversal exploit in Aiohttp allows reading or accessing files outside the intended directory.

Entry point

Parameter../../../../../../../../../../../../etc/shadow · path

Pathstatic/../../../../../../../../../../../../etc/shadow

Directory traversal via aiohttp static file serving when follow_symlinks is enabled (LFI).

Affected Aiohttp versions

Aiohttp< 3.9.2

All known vulnerabilities by product

Alt Linux Linuxmint Red Os Suse Ubuntu Aiohttp

CVSS 7.5 for CVE-2024-23334

7.5

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector:NETWORK

Attack Complexity:HIGH

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:NONE

Availability:NONE

Working code

98%confidence this exploit runs

Based on 6 file(s) in the source

EPSS Score

76.9%higher than 99.5% of all CVEs

Updated 2026-08-18

Exploit Details

Modified:2026-08-18 08:54

Last Seen:2026-08-18 09:06

Reporter:curls0206

Repository:No longer on GitHub

Other exploits for CVE-2024-23334

Exploit for Server-Side Request Forgery in Lollms

2026-07-23 Max78000GITHUB

Exploit for Path Traversal in Aiohttp

2026-07-23 Max78000GITHUB

📄 aiohttp 3.9.1 Directory Traversal

2026-02-05 Beatriz Fresno NaumovaPACKETSTORM

aiohttp 3.9.1 - directory traversal PoC

2026-02-04 Beatriz Fresno NaumovaEXPLOITDB

Exploit for Path Traversal in Aiohttp

2026-01-27 Sn0wBaallGITHUB

Exploit for Path Traversal in Aiohttp

2024-12-25 BestDevOfcGITHUB

Exploit for Path Traversal in Aiohttp

2024-12-09 Betan423GITHUB

Exploit for Path Traversal in Aiohttp

2024-11-14 TheRedP4ntherGITHUB

Exploit Code

README2 lines

## https://sploitus.com/exploit?id=29F09060-C922-5F4F-A847-EE65F2D17662
No description provided

Exploit Code

Share

Share on social media: