Lucene search

K
nvd[email protected]NVD:CVE-2023-33756
HistoryAug 08, 2023 - 3:15 p.m.

CVE-2023-33756

2023-08-0815:15:10
CWE-22
web.nvd.nist.gov
3
cve-2023-33756
foswiki
spreadsheetplugin
directory traversal

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.002

Percentile

52.4%

An issue in the SpreadSheetPlugin component of Foswiki v2.1.7 and below allows attackers to execute a directory traversal.

Affected configurations

Nvd
Node
foswikifoswikiRange1.0.02.1.7
VendorProductVersionCPE
foswikifoswiki*cpe:2.3:a:foswiki:foswiki:*:*:*:*:*:*:*:*

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.002

Percentile

52.4%

Related for NVD:CVE-2023-33756