Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-34xx-8783-75f7

Опубликовано: 04 окт. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

mojoPortal v2.7 was discovered to contain a path traversal vulnerability via the "f" parameter at /DesignTools/CssEditor.aspx. This vulnerability allows authenticated attackers to read arbitrary files in the system.

mojoPortal v2.7 was discovered to contain a path traversal vulnerability via the "f" parameter at /DesignTools/CssEditor.aspx. This vulnerability allows authenticated attackers to read arbitrary files in the system.

EPSS

Процентиль: 76%
0.00934
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-22

Связанные уязвимости

CVSS3: 6.5
nvd
больше 3 лет назад

mojoPortal v2.7 was discovered to contain a path traversal vulnerability via the "f" parameter at /DesignTools/CssEditor.aspx. This vulnerability allows authenticated attackers to read arbitrary files in the system.

EPSS

Процентиль: 76%
0.00934
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-22