Lucene search

MitreCVE-2023-33756

HistoryAug 08, 2023 - 3:15 p.m.

CVE-2023-33756

2023-08-0815:15:10

CWE-22

mitre

web.nvd.nist.gov

cve-2023-33756

spreadsheetplugin

foswiki

directory traversal

security vulnerability

nvd

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.002

Percentile

52.4%

JSON

An issue in the SpreadSheetPlugin component of Foswiki v2.1.7 and below allows attackers to execute a directory traversal.

Affected configurations

Nvd

Node

foswikifoswikiRange1.0.0–2.1.7

VendorProductVersionCPE
foswikifoswiki*cpe:2.3:a:foswiki:foswiki:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
foswiki	foswiki	*	cpe:2.3:a:foswiki:foswiki::::::::

References

foswiki.org/Support/SecurityAlert-CVE-2023-33756

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.002

Percentile

52.4%

JSON

Related for CVE-2023-33756