CVE-2023-46496

2023-12-0800:00:00

mitre

www.cve.org

evershop

npm

directory traversal

cve-2023-46496

delete function

api/files endpoint

8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.4%

JSON

Directory Traversal vulnerability in EverShop NPM versions before v.1.0.0-rc.8 allows a remote attacker to obtain sensitive information via a crafted request to the DELETE function in api/files endpoint.

References

devhub.checkmarx.com/cve-details/CVE-2023-46496/

devhub.checkmarx.com/cve-details/Cx943be66a-54cc/