Lucene search

K

[email protected]CVE-2024-33383

HistoryApr 30, 2024 - 8:15 p.m.

CVE-2024-33383

2024-04-3020:15:08

[email protected]

web.nvd.nist.gov

23

remote attacker

sensitive information

crafted get request

filepath parameter

6.3 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

Arbitrary File Read vulnerability in novel-plus 4.3.0 and before allows a remote attacker to obtain sensitive information via a crafted GET request using the filePath parameter.

References

juvl1ne.github.io/2024/04/18/novel-plus-vulnerability/

6.3 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

Related for CVE-2024-33383