CVE-2023-33518
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk36th percentile - higher than 36% of all known CVEs
Summary
Versions 11 and later of emoncms have an information disclosure vulnerability that allows attackers to obtain the web directory path and other information leaked by the server via a crafted web request.
Risk Assessment
This vulnerability may lead to the disclosure of sensitive information about the server's structure, increasing the risk of further attacks on the system.
Recommendation
It is recommended to update emoncms to the latest version and monitor server logs for potential attempts to exploit this vulnerability.
Original NVD description (English source)
emoncms v11 and later was discovered to contain an information disclosure vulnerability which allows attackers to obtain the web directory path and other information leaked by the server via a crafted web request.