CVE-2022-36671

High

Novel-Plus v3.6.2 was discovered to contain an arbitrary file download vulnerability via the background file download API.

mitre·CWE-494·Published 2022-09-01

CVSS

7.5

EPSS

0.00

KEV

Exploits

cve.orgen

122 chars

Novel-Plus v3.6.2 was discovered to contain an arbitrary file download vulnerability via the background file download API.

NVDen

122 chars

Novel-Plus v3.6.2 was discovered to contain an arbitrary file download vulnerability via the background file download API.

Se ha detectado que Novel-Plus versión v3.6.2, contiene una vulnerabilidad de descarga de archivos arbitraria por medio de la API de descarga de archivos en segundo plano

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	NVD	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N