CVE Explorer

CVE-2026-36723

An unrestricted file rename vulnerability in the /api/create-user component of bookcars v8.3 allows authenticated attackers to leverage directory traversal sequences to move arbitrary files from temporary storage to arbitrary locations on the server filesystem. This enables unauthorized access to sensitive files, the overwriting of critical application files, and remote code execution (RCE).

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:b1b6e0f2d93b89be20ea59a870e5ad1a72d032ec1de3cd513afa271b50234248

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

cwe · 2 assertions

{"cweId":"CWE-22","description":"CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')","lang":"en","type":"CWE"}

cve_program_cvelist_v5cwe
urn:baitaphish:normalized-source-record:v2:e4d610e43d7b5bf2016810d306d070c74d68a461e4d48ff9f423c72212e2adb7 · sha256:c39e56766e5f2774… · /containers/adp/0/problemTypes/0/descriptions/0

{"description":"n/a","lang":"en","type":"text"}

cve_program_cvelist_v5cwe
urn:baitaphish:normalized-source-record:v2:e4d610e43d7b5bf2016810d306d070c74d68a461e4d48ff9f423c72212e2adb7 · sha256:c39e56766e5f2774… · /containers/cna/problemTypes/0/descriptions/0

Affected products and versions

1 source assertion

{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:e4d610e43d7b5bf2016810d306d070c74d68a461e4d48ff9f423c72212e2adb7 · sha256:c39e56766e5f2774… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion

{"metric":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}

cve_program_cvelist_v5cvss
urn:baitaphish:normalized-source-record:v2:e4d610e43d7b5bf2016810d306d070c74d68a461e4d48ff9f423c72212e2adb7 · sha256:c39e56766e5f2774… · /containers/adp/0/metrics/0/cvssV3_1

CWE assertions

2 source assertions

{"cweId":"CWE-22","description":"CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')","lang":"en","type":"CWE"}

cve_program_cvelist_v5cwe
urn:baitaphish:normalized-source-record:v2:e4d610e43d7b5bf2016810d306d070c74d68a461e4d48ff9f423c72212e2adb7 · sha256:c39e56766e5f2774… · /containers/adp/0/problemTypes/0/descriptions/0

{"description":"n/a","lang":"en","type":"text"}

cve_program_cvelist_v5cwe
urn:baitaphish:normalized-source-record:v2:e4d610e43d7b5bf2016810d306d070c74d68a461e4d48ff9f423c72212e2adb7 · sha256:c39e56766e5f2774… · /containers/cna/problemTypes/0/descriptions/0

Source references

1 source assertion

{"url":"https://github.com/CC-T-454455/Vulnerabilities/tree/master/bookcars/vulnerability-17"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:e4d610e43d7b5bf2016810d306d070c74d68a461e4d48ff9f423c72212e2adb7 · sha256:c39e56766e5f2774… · /containers/cna/references/0

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer