Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2h5x-h7x4-hm9h

Опубликовано: 24 мар. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 7.7
CVSS3: 8.8

Описание

Host and event action script input is validated with a regex (set by the administrator), but the validation runs in multiline mode. If ^ and $ anchors are used in user input validation, an injected newline lets authenticated users bypass the check and inject shell commands.

Host and event action script input is validated with a regex (set by the administrator), but the validation runs in multiline mode. If ^ and $ anchors are used in user input validation, an injected newline lets authenticated users bypass the check and inject shell commands.

EPSS

Процентиль: 22%
0.00297
Низкий

7.7 High

CVSS4

8.8 High

CVSS3

Дефекты

CWE-78

Связанные уязвимости

CVSS3: 8.8
ubuntu
6 месяцев назад

Host and event action script input is validated with a regex (set by the administrator), but the validation runs in multiline mode. If ^ and $ anchors are used in user input validation, an injected newline lets authenticated users bypass the check and inject shell commands.

CVSS3: 8.8
nvd
6 месяцев назад

Host and event action script input is validated with a regex (set by the administrator), but the validation runs in multiline mode. If ^ and $ anchors are used in user input validation, an injected newline lets authenticated users bypass the check and inject shell commands.

CVSS3: 8.8
debian
6 месяцев назад

Host and event action script input is validated with a regex (set by t ...

CVSS3: 8.8
redos
5 месяцев назад

Уязвимость zabbix7.4

CVSS3: 8.8
redos
5 месяцев назад

Уязвимость zabbix7.2

EPSS

Процентиль: 22%
0.00297
Низкий

7.7 High

CVSS4

8.8 High

CVSS3

Дефекты

CWE-78