NetSight
high7.5

CVE-2024-33383

Arbitrary File Read vulnerability in novel-plus 4.3.0 and before allows a remote attacker to obtain sensitive information via a crafted GET request using the f…

Impact

Arbitrary File Read vulnerability in novel-plus 4.3.0 and before allows a remote attacker to obtain sensitive information via a crafted GET request using the filePath parameter.

Affected products

VendorProductAffected versions
XxyopenNovel-Plus
through 4.3.0

Weakness classification

References