Lucene search

K
cvelistMitreCVELIST:CVE-2023-46497
HistoryDec 08, 2023 - 12:00 a.m.

CVE-2023-46497

2023-12-0800:00:00
mitre
www.cve.org
2
cve-2023-46497
evershop
directory traversal
npm
remote attacker
sensitive information
crafted request
mkdirsync
createfolder.js

AI Score

5.4

Confidence

High

EPSS

0.001

Percentile

17.6%

Directory Traversal vulnerability in EverShop NPM versions before v.1.0.0-rc.8 allows a remote attacker to obtain sensitive information via a crafted request to the mkdirSync function in the folderCreate/createFolder.js endpoint.

AI Score

5.4

Confidence

High

EPSS

0.001

Percentile

17.6%

Related for CVELIST:CVE-2023-46497