Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3gvp-wpmx-3ff3

Опубликовано: 27 янв. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 2
CVSS3: 4.5

Описание

A vulnerability, which was classified as problematic, was found in Postman up to 11.20 on Windows. This affects an unknown part in the library profapi.dll. The manipulation leads to untrusted search path. An attack has to be approached locally. The complexity of an attack is rather high. The exploitability is told to be difficult. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability, which was classified as problematic, was found in Postman up to 11.20 on Windows. This affects an unknown part in the library profapi.dll. The manipulation leads to untrusted search path. An attack has to be approached locally. The complexity of an attack is rather high. The exploitability is told to be difficult. The vendor was contacted early about this disclosure but did not respond in any way.

EPSS

Процентиль: 5%
0.0002
Низкий

2 Low

CVSS4

4.5 Medium

CVSS3

Дефекты

CWE-426

Связанные уязвимости

CVSS3: 4.5
nvd
11 месяцев назад

A vulnerability, which was classified as problematic, was found in Postman up to 11.20 on Windows. This affects an unknown part in the library profapi.dll. The manipulation leads to untrusted search path. An attack has to be approached locally. The complexity of an attack is rather high. The exploitability is told to be difficult. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS3: 4.5
fstec
11 месяцев назад

Уязвимость файла profapi.dll программного обеспечения для создания, тестирования, документирования, публикации и обслуживания программного интерфейса приложения (API) Postman, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 5%
0.0002
Низкий

2 Low

CVSS4

4.5 Medium

CVSS3

Дефекты

CWE-426