CVE-2023-46497

creationtimestamp| type| source ---|---|--- 2023-12-31 17:11:33+00:00| seen| https://t.me/ctinow/161140...

CVE-2023-46497

Vulnerability summary: EverShop NPM prior to version 1.0.0-rc.8 contains a Directory Traversal flaw. An attacker can exploit the mkdirSync pathway in folderCreate/createFolder.js to access sensitive information. Affected product/version: EverShop NPM versions before 1.0.0-rc.8. Root cause: Improp...

CVE-2023-46497

Directory Traversal vulnerability in EverShop NPM versions before v.1.0.0-rc.8 allows a remote attacker to obtain sensitive information via a crafted request to the mkdirSync function in the folderCreate/createFolder.js endpoint...