Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2wjg-2258-j35v

Опубликовано: 16 фев. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

An arbitrary file upload vulnerability in /admin/upgrade of CSZ CMS v1.3.0 allows attackers to execute arbitrary code via uploading a crafted Zip file.

An arbitrary file upload vulnerability in /admin/upgrade of CSZ CMS v1.3.0 allows attackers to execute arbitrary code via uploading a crafted Zip file.

EPSS

Процентиль: 87%
0.035
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-434

Связанные уязвимости

CVSS3: 9.8
nvd
почти 2 года назад

An arbitrary file upload vulnerability in /admin/upgrade of CSZ CMS v1.3.0 allows attackers to execute arbitrary code via uploading a crafted Zip file.

EPSS

Процентиль: 87%
0.035
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-434