Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-22f5-q5gp-64wx

Опубликовано: 12 авг. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.2

Описание

ThreatSonar Anti-Ransomware from TeamT5 does not properly validate the content of uploaded files. Remote attackers with administrator privileges on the product platform can upload malicious files, which can be used to execute arbitrary system command on the server.

ThreatSonar Anti-Ransomware from TeamT5 does not properly validate the content of uploaded files. Remote attackers with administrator privileges on the product platform can upload malicious files, which can be used to execute arbitrary system command on the server.

EPSS

Процентиль: 63%
0.00465
Низкий

7.2 High

CVSS3

Дефекты

CWE-434

Связанные уязвимости

CVSS3: 7.2
nvd
10 месяцев назад

ThreatSonar Anti-Ransomware from TeamT5 does not properly validate the content of uploaded files. Remote attackers with administrator privileges on the product platform can upload malicious files, which can be used to execute arbitrary system command on the server.

EPSS

Процентиль: 63%
0.00465
Низкий

7.2 High

CVSS3

Дефекты

CWE-434