medium6.5
CVE-2023-33690
SonicJS up to v0.7.0 allows attackers to execute an authenticated path traversal when an attacker injects special characters into the filename of a backup CMS.
Impact
SonicJS up to v0.7.0 allows attackers to execute an authenticated path traversal when an attacker injects special characters into the filename of a backup CMS.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sonicjs | Sonicjs | from 0.5.4 through 0.7.0 |