CVE-2023-34878

2023-06-1400:00:00

mitre

www.cve.org

cve-2023-34878

ujcms v6.0.2

sensitive information

dir parameter

file download

0.001 Low

EPSS

Percentile

44.7%

JSON

An issue was discovered in Ujcms v6.0.2 allows attackers to gain sensitive information via the dir parameter to /api/backend/core/web-file-html/download-zip.

References

github.com/ujcms/ujcms/issues/6

0.001 Low

EPSS

Percentile

44.7%

JSON

Related for CVELIST:CVE-2023-34878