Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3ffv-92c7-qq64

Опубликовано: 30 сент. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8

Описание

ZKTeco Xiamen Information Technology ZKBio Time 8.0.7 Build: 20220721.14829 was discovered to contain a CSV injection vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload injected into the Content text field of the Add New Message module.

ZKTeco Xiamen Information Technology ZKBio Time 8.0.7 Build: 20220721.14829 was discovered to contain a CSV injection vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload injected into the Content text field of the Add New Message module.

EPSS

Процентиль: 71%
0.00684
Низкий

8 High

CVSS3

Дефекты

CWE-1236

Связанные уязвимости

CVSS3: 8
nvd
больше 3 лет назад

ZKTeco Xiamen Information Technology ZKBio Time 8.0.7 Build: 20220721.14829 was discovered to contain a CSV injection vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload injected into the Content text field of the Add New Message module.

EPSS

Процентиль: 71%
0.00684
Низкий

8 High

CVSS3

Дефекты

CWE-1236