Lucene search

K
nvd[email protected]NVD:CVE-2023-33518
HistoryJun 05, 2023 - 3:15 p.m.

CVE-2023-33518

2023-06-0515:15:09
CWE-668
web.nvd.nist.gov
4
cve-2023-33518
information disclosure
web directory path
crafted web request
server leakage

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS

0.001

Percentile

31.2%

emoncms v11 and later was discovered to contain an information disclosure vulnerability which allows attackers to obtain the web directory path and other information leaked by the server via a crafted web request.

Affected configurations

Nvd
Node
emoncmsemoncmsMatch11.0
VendorProductVersionCPE
emoncmsemoncms11.0cpe:2.3:a:emoncms:emoncms:11.0:*:*:*:*:*:*:*

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS

0.001

Percentile

31.2%

Related for NVD:CVE-2023-33518