Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-33rj-7vx9-p22p

Опубликовано: 24 нояб. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

The API endpoints in Ironman PowerShell Universal 3.0.0 through 4.2.0 allow remote attackers to execute arbitrary commands via crafted HTTP requests if a param block is used, due to invalid sanitization of input strings. The fixed versions are 3.10.2, 4.1.10, and 4.2.1.

The API endpoints in Ironman PowerShell Universal 3.0.0 through 4.2.0 allow remote attackers to execute arbitrary commands via crafted HTTP requests if a param block is used, due to invalid sanitization of input strings. The fixed versions are 3.10.2, 4.1.10, and 4.2.1.

EPSS

Процентиль: 81%
0.01552
Низкий

8.8 High

CVSS3

Дефекты

CWE-77

Связанные уязвимости

CVSS3: 8.8
nvd
около 2 лет назад

The API endpoints in Ironman PowerShell Universal 3.0.0 through 4.2.0 allow remote attackers to execute arbitrary commands via crafted HTTP requests if a param block is used, due to invalid sanitization of input strings. The fixed versions are 3.10.2, 4.1.10, and 4.2.1.

EPSS

Процентиль: 81%
0.01552
Низкий

8.8 High

CVSS3

Дефекты

CWE-77