Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-37pj-rcr3-gr3m

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Sandline Centraleyezer (On Premises) allows unrestricted File Upload with a dangerous type, because the feature of adding ".jpg" to any uploaded filename is not enforced on the server side.

Sandline Centraleyezer (On Premises) allows unrestricted File Upload with a dangerous type, because the feature of adding ".jpg" to any uploaded filename is not enforced on the server side.

EPSS

Процентиль: 61%
0.00418
Низкий

Связанные уязвимости

CVSS3: 9.8
nvd
около 6 лет назад

Sandline Centraleyezer (On Premises) allows unrestricted File Upload with a dangerous type, because the feature of adding ".jpg" to any uploaded filename is not enforced on the server side.

EPSS

Процентиль: 61%
0.00418
Низкий