Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-29fh-m28h-hr9q

Опубликовано: 30 нояб. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

Remote Code Execution (RCE) vulnerability in o2oa version 8.1.2 and before, allows attackers to create a new interface in the service management function to execute JavaScript.

Remote Code Execution (RCE) vulnerability in o2oa version 8.1.2 and before, allows attackers to create a new interface in the service management function to execute JavaScript.

EPSS

Процентиль: 89%
0.04312
Низкий

9.8 Critical

CVSS3

Связанные уязвимости

CVSS3: 9.8
nvd
около 2 лет назад

Remote Code Execution (RCE) vulnerability in o2oa version 8.1.2 and before, allows attackers to create a new interface in the service management function to execute JavaScript.

EPSS

Процентиль: 89%
0.04312
Низкий

9.8 Critical

CVSS3