CVE-2023-28413

2023-05-2302:15:10

CWE-22

[email protected]

web.nvd.nist.gov

cve-2023-28413

directory traversal

snow monkey forms

remote attack

sensitive information disclosure

denial of service

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.3 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.4%

JSON

Directory traversal vulnerability in Snow Monkey Forms versions v5.0.6 and earlier allows a remote unauthenticated attacker to obtain sensitive information, alter the website, or cause a denial-of-service (DoS) condition.

Affected configurations

Vulners

NVD

Node

2incsnow_monkey_formsMatch5.0.6

VendorProductVersionCPE
2incsnow_monkey_forms5.0.6cpe:2.3:a:2inc:snow_monkey_forms:5.0.6:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
2inc	snow_monkey_forms	5.0.6	cpe:2.3:a:2inc:snow_monkey_forms:5.0.6:::::::*

CNA Affected

[
  {
    "vendor": "Monkey Wrench Inc.",
    "product": "Snow Monkey Forms",
    "versions": [
      {
        "version": "versions v5.0.6 and earlier",
        "status": "affected"
      }
    ]
  }
]