Lucene search

K
cve[email protected]CVE-2023-37781
HistoryJul 17, 2023 - 8:15 p.m.

CVE-2023-37781

2023-07-1720:15:13
CWE-22
web.nvd.nist.gov
13
emqx
cve-2023-37781
directory traversal
security issue
nvd

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

0.001 Low

EPSS

Percentile

21.2%

An issue in the emqx_sn plugin of EMQX v4.3.8 allows attackers to execute a directory traversal via uploading a crafted .txt file.

Affected configurations

NVD
Node
emqxemqxMatch4.3.8
CPENameOperatorVersion
emqx:emqxemqxeq4.3.8

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

0.001 Low

EPSS

Percentile

21.2%

Related for CVE-2023-37781