{ "id": "CVE-2024-33383", "sourceIdentifier": "cve@mitre.org", "published": "2024-04-30T20:15:08.580", "lastModified": "2024-05-01T13:02:20.750", "vulnStatus": "Awaiting Analysis", "descriptions": [ { "lang": "en", "value": "Arbitrary File Read vulnerability in novel-plus 4.3.0 and before allows a remote attacker to obtain sensitive information via a crafted GET request using the filePath parameter." }, { "lang": "es", "value": "Vulnerabilidad de lectura arbitraria de archivos en novel-plus 4.3.0 y anteriores permite a un atacante remoto obtener informaci\u00f3n confidencial a trav\u00e9s de una solicitud GET manipulada utilizando el par\u00e1metro filePath." } ], "metrics": {}, "references": [ { "url": "https://juvl1ne.github.io/2024/04/18/novel-plus-vulnerability/", "source": "cve@mitre.org" } ] }