CVE Catalog
CVE-2023-33690
MediumCVSS 6.5Exploitation Probability (EPSS)
Elevated risk0.90%
55th percentile - higher than 55% of all known CVEs
Summary
SonicJS up to v0.7.0 allows attackers to execute an authenticated path traversal when an attacker injects special characters into the filename of a backup CMS.
Risk Assessment
Attackers may gain access to sensitive data or files on the server, potentially leading to serious security breaches.
Recommendation
It is recommended to update SonicJS to the latest version to mitigate the risk associated with this vulnerability.
Original NVD description (English source)
SonicJS up to v0.7.0 allows attackers to execute an authenticated path traversal when an attacker injects special characters into the filename of a backup CMS.