CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2023-32623

Directory traversal vulnerability in Snow Monkey Forms v5.1.1 and earlier allows a remote unauthenticated attacker to delete arbitrary files on the server.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.057

EPSS Ranking 90.1%

CVSS Severity

CVSS v3 Score 9.1

References

https://jvn.jp/en/jp/JVN97127032/
https://snow-monkey.2inc.org/2023/07/14/snow-monkey-forms-v5-1-2/
https://jvn.jp/en/jp/JVN97127032/
https://snow-monkey.2inc.org/2023/07/14/snow-monkey-forms-v5-1-2/

Products affected by CVE-2023-32623

2inc » Snow Monkey Forms » Version: N/A

cpe:2.3:a:2inc:snow_monkey_forms:-
2inc » Snow Monkey Forms » Version: 5.0.7

cpe:2.3:a:2inc:snow_monkey_forms:5.0.7
2inc » Snow Monkey Forms » Version: 5.1.1

cpe:2.3:a:2inc:snow_monkey_forms:5.1.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-32623

Products

Pricing

Contact Us