Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2f9q-qvgh-8gvv

Опубликовано: 29 янв. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 6.3

Описание

A vulnerability classified as critical has been found in Sichuan Yougou Technology KuERP up to 1.0.4. Affected is an unknown function of the file /runtime/log. The manipulation leads to improper output neutralization for logs. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-252252. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability classified as critical has been found in Sichuan Yougou Technology KuERP up to 1.0.4. Affected is an unknown function of the file /runtime/log. The manipulation leads to improper output neutralization for logs. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-252252. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

EPSS

Процентиль: 40%
0.00181
Низкий

6.3 Medium

CVSS3

Дефекты

CWE-116
CWE-117

Связанные уязвимости

CVSS3: 6.3
nvd
около 2 лет назад

A vulnerability classified as critical has been found in Sichuan Yougou Technology KuERP up to 1.0.4. Affected is an unknown function of the file /runtime/log. The manipulation leads to improper output neutralization for logs. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-252252. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

EPSS

Процентиль: 40%
0.00181
Низкий

6.3 Medium

CVSS3

Дефекты

CWE-116
CWE-117