CVE-2023-33518

5.3 mediumEPSS 0.5%

Medium (5.3) in emoncms emoncms. EPSS 0.5% chance of exploitation in the next 30 days.

emoncms v11 and later was discovered to contain an information disclosure vulnerability which allows attackers to obtain the web directory path and other information leaked by the server via a crafted web request.

Severity

CVSS 3.1

5.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 39% of CVEs (scores of 2026-10-31)
CWEs: CWE-668, CWE-203
Published: 2023-06-05
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

emoncms:emoncms

References

https://github.com/emoncms/emoncms/issues/1856
https://github.com/emoncms/emoncms/issues/1856

Check your stack JSON