Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-26q7-27mp-g4qj

Опубликовано: 21 сент. 2024
Источник: github
Github: Не прошло ревью
CVSS4: 6
CVSS3: 6.5

Описание

The vulnerability allows an attacker to craft MQTT messages that include relative path traversal sequences, enabling them to read arbitrary files on the system. This could lead to the disclosure of sensitive information, such as configuration files and JWT signing secrets.

The vulnerability allows an attacker to craft MQTT messages that include relative path traversal sequences, enabling them to read arbitrary files on the system. This could lead to the disclosure of sensitive information, such as configuration files and JWT signing secrets.

EPSS

Процентиль: 39%
0.0017
Низкий

6 Medium

CVSS4

6.5 Medium

CVSS3

Дефекты

CWE-22
CWE-24

Связанные уязвимости

CVSS3: 6.5
nvd
11 месяцев назад

The vulnerability allows an attacker to craft MQTT messages that include relative path traversal sequences, enabling them to read arbitrary files on the system. This could lead to the disclosure of sensitive information, such as configuration files and JWT signing secrets.

CVSS3: 6.5
fstec
11 месяцев назад

Уязвимость реализации протокола Message Queuing Telemetry Transport (MQTT) платформы управления промышленными сетями MXview One, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 39%
0.0017
Низкий

6 Medium

CVSS4

6.5 Medium

CVSS3

Дефекты

CWE-22
CWE-24