CVE-2022-36671: High severity xxyopen novel-plus vulnerability
Published Sep 1, 2022
·Updated
Novel-Plus v3.6.2 was discovered to contain an arbitrary file download vulnerability via the background file download API.
Affected Software
1 affected component
xxyopen Novel-Plus=3.6.2
Event History
Sep 1, 2022
CVE Published
via MITRE·02:08 AM
Data Sourced
via MITRE·02:08 AM
Description
Frequently Asked Questions
1
What is the vulnerability ID for the arbitrary file download vulnerability in Novel-Plus v3.6.2?
The vulnerability ID for the arbitrary file download vulnerability in Novel-Plus v3.6.2 is CVE-2022-36671.
2
What is the severity rating of CVE-2022-36671?
CVE-2022-36671 has a severity rating of 7.5 (high).
3
What software version is affected by CVE-2022-36671?
CVE-2022-36671 affects Novel-Plus v3.6.2.
4
How does the arbitrary file download vulnerability in Novel-Plus v3.6.2 work?
The arbitrary file download vulnerability in Novel-Plus v3.6.2 allows an attacker to download arbitrary files through the background file download API.
5
Is there a fix available for CVE-2022-36671?
At the moment, there is no information available about a fix for CVE-2022-36671. It is recommended to follow the vendor's security advisories for updates.