CVE-2024-33383

2024-04-3020:15:08

[email protected]

web.nvd.nist.gov

file read vulnerability

novel-plus

remote attacker

sensitive information

get request

filepath parameter

6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

Arbitrary File Read vulnerability in novel-plus 4.3.0 and before allows a remote attacker to obtain sensitive information via a crafted GET request using the filePath parameter.

References

juvl1ne.github.io/2024/04/18/novel-plus-vulnerability/