Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3g8c-3h7h-7p82

Опубликовано: 09 нояб. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

Due to insufficient input validation, SAP NetWeaver Application Server ABAP and ABAP Platform allows an attacker with high level privileges to use a remote enabled function to delete a file which is otherwise restricted. On successful exploitation an attacker can completely compromise the integrity and availability of the application.

Due to insufficient input validation, SAP NetWeaver Application Server ABAP and ABAP Platform allows an attacker with high level privileges to use a remote enabled function to delete a file which is otherwise restricted. On successful exploitation an attacker can completely compromise the integrity and availability of the application.

EPSS

Процентиль: 62%
0.00423
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-20
CWE-22

Связанные уязвимости

CVSS3: 8.7
nvd
около 3 лет назад

Due to insufficient input validation, SAP NetWeaver Application Server ABAP and ABAP Platform allows an attacker with high level privileges to use a remote enabled function to delete a file which is otherwise restricted. On successful exploitation an attacker can completely compromise the integrity and availability of the application.

EPSS

Процентиль: 62%
0.00423
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-20
CWE-22