Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-26cj-x9h8-rx93

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Improper input validation vulnerability exists in TOBESOFT XPLATFORM which could cause arbitrary .hta file execution when the command string is begun with http://, https://, mailto://

Improper input validation vulnerability exists in TOBESOFT XPLATFORM which could cause arbitrary .hta file execution when the command string is begun with http://, https://, mailto://

EPSS

Процентиль: 70%
0.00654
Низкий

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 8.8
nvd
почти 5 лет назад

Improper input validation vulnerability exists in TOBESOFT XPLATFORM which could cause arbitrary .hta file execution when the command string is begun with http://, https://, mailto://

EPSS

Процентиль: 70%
0.00654
Низкий

Дефекты

CWE-20