ExploitPublished
aiohttp 3.9.1 · directory traversal PoC
Source Exploit-DB RSS Feed
0
Severity
MediumRated by Threat Radar
Data as of 10 Apr 2026, 00:24 UTC
What to do
AI-suggested
Until an official fix is available, consider restricting access to aiohttp services and validating or sanitizing file path inputs to mitigate directory traversal risks.
Description
aiohttp 3.9.1 - directory traversal PoC
Indicators of compromise
Exploit source code
# Exploit Title: Python aiohttp directory traversal PoC (CVE-2024-23334)
# Google Dork: N/A
# Date: 2025-10-06
# Exploit Author: Beatriz Fresno Naumova
# Vendor Homepage: https://www.aiohttp.org / https://www.python.org
# Software Link: https://github.com/aio-libs/aiohttp (vulnerable tag: 3.9.1)
# Version: aiohttp 3.9.1 (vulnerable)
# Tested on: Linux (host for Vulhub / Docker) and inside container VM: aiohttp 3.9.1
# CVE: CVE-2024-23334
# Description:
# Proof-of-concept to verify directory-tra…References
Community reviews
Loading reviews…