An issue in the emqx_sn plugin of EMQX v4.3.8 allows attackers to execute a directory traversal via uploading a crafted .txt file.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-37781.json"