exploitDog

GHSA-2g4v-8vvw-r8m9

Опубликовано: 26 июн. 2024

Источник: github

Github: Не прошло ревью

CVSS3: 9.8

Описание

An issue discovered in skycaiji 2.8 allows attackers to run arbitrary code via crafted POST request to /index.php?s=/admin/develop/editor_save.

An issue discovered in skycaiji 2.8 allows attackers to run arbitrary code via crafted POST request to /index.php?s=/admin/develop/editor_save.

Ссылки

EPSS

Процентиль: 40%

0.00184

Низкий

9.8 Critical

CVSS3

CVE ID

Дефекты

CWE-74

CWE-75

Связанные уязвимости

CVE-2024-39243

CVSS3: 9.8

nvd

около 1 года назад

An issue discovered in skycaiji 2.8 allows attackers to run arbitrary code via crafted POST request to /index.php?s=/admin/develop/editor_save.

EPSS

Процентиль: 40%

0.00184

Низкий

9.8 Critical

CVSS3

CVE ID

Дефекты

CWE-74

CWE-75