Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2023-33690

Description

SonicJS up to v0.7.0 allows attackers to execute an authenticated path traversal when an attacker injects special characters into the filename of a backup CMS.

POC

Reference

- https://github.com/lane711/sonicjs/pull/183

- https://youtu.be/6ZuwA9CkQLg

Github

No PoCs found on GitHub currently.