Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-363h-22w6-hcrm

Опубликовано: 19 сент. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 6.1

Описание

Libraesva ESG 4.5 through 5.5.x before 5.5.7 allows command injection via a compressed e-mail attachment. For ESG 5.0 a fix has been released in 5.0.31. For ESG 5.1 a fix has been released in 5.1.20. For ESG 5.2 a fix has been released in 5.2.31. For ESG 5.4 a fix has been released in 5.4.8. For ESG 5.5. a fix has been released in 5.5.7.

Libraesva ESG 4.5 through 5.5.x before 5.5.7 allows command injection via a compressed e-mail attachment. For ESG 5.0 a fix has been released in 5.0.31. For ESG 5.1 a fix has been released in 5.1.20. For ESG 5.2 a fix has been released in 5.2.31. For ESG 5.4 a fix has been released in 5.4.8. For ESG 5.5. a fix has been released in 5.5.7.

EPSS

Процентиль: 90%
0.05179
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-77

Связанные уязвимости

CVSS3: 6.1
nvd
5 месяцев назад

Libraesva ESG 4.5 through 5.5.x before 5.5.7 allows command injection via a compressed e-mail attachment. For ESG 5.0 a fix has been released in 5.0.31. For ESG 5.1 a fix has been released in 5.1.20. For ESG 5.2 a fix has been released in 5.2.31. For ESG 5.4 a fix has been released in 5.4.8. For ESG 5.5. a fix has been released in 5.5.7.

EPSS

Процентиль: 90%
0.05179
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-77