CVE-2023-33871

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Iagona ScrutisWeb versions 2.1.37 and prior are vulnerable to a directory traversal vulnerability that could allow an unauthenticated user to directly access any file outside the webroot.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published: Jul 18, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-338725.5Improper access control in the Intel Support android application all verions may allow an authenticated user to potentially enable informati CVE-2023-338737.8This privilege escalation vulnerability, if exploited, cloud allow a local OS-authenticated user with standard privileges to escalate to Sys CVE-2023-338747.3Uncontrolled search path in some Intel(R) NUC 12 Pro Kits & Mini PCs - NUC12WS Intel(R) HID Event Filter Driver installation software before CVE-2023-338755.5Improper access control for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow an unauthen CVE-2023-338768.8A use-after-free vulnerability exists in the way Foxit Reader 12.1.2.15332 handles destroying annotations. Specially crafted Javascript code CVE-2023-338777.8Out-of-bounds write in some Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA in version 0.25.0 may allow an authenticate CVE-2023-338787.8Path transversal in some Intel(R) NUC P14E Laptop Element Audio Install Package software before version 156 for Windows may allow an authent CVE-2023-338793.3In music service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileg CVE-2023-33886.1The Beautiful Cookie Consent Banner for WordPress is vulnerable to Stored Cross-Site Scripting via the 'nsc_bar_content_href' parameter in v CVE-2023-338803.3In music service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileg CVE-2023-338815.5In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution priv CVE-2023-338825.5In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution priv