Vulnerability Details CVE-2023-33690
SonicJS up to v0.7.0 allows attackers to execute an authenticated path traversal when an attacker injects special characters into the filename of a backup CMS.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 32.7%
CVSS Severity
CVSS v3 Score 6.5
Products affected by CVE-2023-33690
-
cpe:2.3:a:sonicjs:sonicjs:0.5.4
-
cpe:2.3:a:sonicjs:sonicjs:0.6.0
-
cpe:2.3:a:sonicjs:sonicjs:0.7.0