Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-25rh-cr4w-2wx6

Опубликовано: 18 авг. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 9.1

Описание

Missing authentication in initial setup functionality left exposed until first reboot in GBIF Integrated Publishing Toolkit versions before 3.3.4 allows remote authenticated attackers to gain administrative control via authentication bypass

Missing authentication in initial setup functionality left exposed until first reboot in GBIF Integrated Publishing Toolkit versions before 3.3.4 allows remote authenticated attackers to gain administrative control via authentication bypass

EPSS

Процентиль: 40%
0.00478
Низкий

9.1 Critical

CVSS4

Дефекты

CWE-288

Связанные уязвимости

nvd
около 1 месяца назад

Missing authentication in initial setup functionality left exposed until first reboot in GBIF Integrated Publishing Toolkit versions before 3.3.4 allows remote authenticated attackers to gain administrative control via authentication bypass

EPSS

Процентиль: 40%
0.00478
Низкий

9.1 Critical

CVSS4

Дефекты

CWE-288