CVE-2023-33690

n/a / n/a PUBLISHED

Description (CNA)

SonicJS up to v0.7.0 allows attackers to execute an authenticated path traversal when an attacker injects special characters into the filename of a backup CMS.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://youtu.be/6ZuwA9CkQLg
https://github.com/lane711/sonicjs/pull/183

ADP enrichment

CVE

No English description supplied.

https://youtu.be/6ZuwA9CkQLg
https://github.com/lane711/sonicjs/pull/183

CISA-ADP

No English description supplied.

No references supplied.