CVE-2023-42487

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Soundminer – CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-22

Affected software

VendorProductVersions
SoundminerSoundminer>= All versions, <= Upgrade to version 2.01

References

Timeline

Published
Sep 27, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-424887.5EisBaer Scada - CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')CVE-2023-424899.8EisBaer Scada - CWE-732: Incorrect Permission Assignment for Critical ResourceCVE-2023-42499.8Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras with firmware version M2.1.6.0CVE-2023-424907.5EisBaer Scada - CWE-200: Exposure of Sensitive Information to an Unauthorized ActorCVE-2023-424919.8EisBaer Scada - CWE-285: Improper AuthorizationCVE-2023-424929.8EisBaer Scada - CWE-321: Use of Hard-coded Cryptographic KeyCVE-2023-424939.8EisBaer Scada - CWE-256: Plaintext Storage of a PasswordCVE-2023-424949.8EisBaer Scada - CWE-749: Exposed Dangerous Method or FunctionCVE-2023-424959.8Dasan Networks - W-Web versions 1.22-1.27 - CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command InjectionCVE-2023-424966.1Reflected cross-site scripting (XSS) vulnerability on the add assignees to a role page in Liferay Portal 7.3.3 through 7.4.3.97, and LiferayCVE-2023-424976.1Reflected cross-site scripting (XSS) vulnerability on the Export for Translation page in Liferay Portal 7.4.3.4 through 7.4.3.85, and LiferaCVE-2023-424986.1Reflected cross-site scripting (XSS) vulnerability in the Language Override edit screen in Liferay Portal 7.4.3.8 through 7.4.3.97, and Life
CVE-2023-42487: High severity, CVSS 7.5 | Vulnix