Lucene search
K

6 matches found

Github Security Blog
Github Security Blog
added 2023/12/08 9:30 p.m.20 views

Directory Traversal in evershop

Directory Traversal vulnerability in EverShop NPM versions before v.1.0.0-rc.8 allows a remote attacker to obtain sensitive information via a crafted request to the mkdirSync function in the folderCreate/createFolder.js endpoint...

5.4CVSS6.3AI score0.00052EPSS
Exploits0References5Affected Software1
OSV
OSV
added 2023/12/08 9:30 p.m.17 views

GHSA-7443-5962-WP4R Directory Traversal in evershop

Directory Traversal vulnerability in EverShop NPM versions before v.1.0.0-rc.8 allows a remote attacker to obtain sensitive information via a crafted request to the mkdirSync function in the folderCreate/createFolder.js endpoint...

5.4CVSS5.1AI score0.00052EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2023/12/08 8:15 p.m.1 views

CVE-2023-46497

Directory Traversal vulnerability in EverShop NPM versions before v.1.0.0-rc.8 allows a remote attacker to obtain sensitive information via a crafted request to the mkdirSync function in the folderCreate/createFolder.js endpoint...

5.4CVSS5.8AI score0.00052EPSS
Exploits0References3
Prion
Prion
added 2023/12/08 8:15 p.m.14 views

Directory traversal

Directory Traversal vulnerability in EverShop NPM versions before v.1.0.0-rc.8 allows a remote attacker to obtain sensitive information via a crafted request to the mkdirSync function in the folderCreate/createFolder.js endpoint...

5.5CVSS6.5AI score0.00052EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2023/12/08 12:0 a.m.2 views

PT-2023-30057 · Npm · Evershop

Name of the Vulnerable Software and Affected Versions: EverShop NPM versions prior to 1.0.0-rc.8 Description: The issue allows a remote attacker to obtain sensitive information via a crafted request to the mkdirSync function in the "folderCreate/createFolder.js" endpoint. This enables the attacke...

5.4CVSS5.2AI score0.00052EPSS
Exploits0References8
Cvelist
Cvelist
added 2023/12/08 12:0 a.m.14 views

CVE-2023-46497

Directory Traversal vulnerability in EverShop NPM versions before v.1.0.0-rc.8 allows a remote attacker to obtain sensitive information via a crafted request to the mkdirSync function in the folderCreate/createFolder.js endpoint...

5.4AI score0.00052EPSS
Exploits0References2
Rows per page
Query Builder