CVE-2023-46496 | BDVDB-2026-218813 Detail

Description#

Directory Traversal vulnerability in EverShop NPM versions before v.1.0.0-rc.8 allows a remote attacker to obtain sensitive information via a crafted request to the DELETE function in api/files endpoint.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://devhub.checkmarx.com/cve-details/Cx943be66a-54cc/
https://devhub.checkmarx.com/cve-details/CVE-2023-46496/

Exploit#

No public exploit known

History#

Version 12023-12-08Record published in the CVE List.
Version 22024-08-02Most recent update recorded in the CVE List.