CVE Catalog
CVE-2023-37781
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk0.74%
50th percentile - higher than 50% of all known CVEs
Summary
An issue in the emqx_sn plugin of EMQX v4.3.8 allows attackers to execute a directory traversal via uploading a crafted .txt file.
Risk Assessment
Attackers may gain access to unauthorized directories on the server, potentially leading to the exposure of sensitive data or malware.
Recommendation
It is recommended to update EMQX to the latest version and monitor uploaded files for potential attacks.
Original NVD description (English source)
An issue in the emqx_sn plugin of EMQX v4.3.8 allows attackers to execute a directory traversal via uploading a crafted .txt file.