Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3jvx-f94j-g6fh

Опубликовано: 25 авг. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

e-Excellence U-Office Force file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker without logging the service can exploit this vulnerability to upload arbitrary files to perform arbitrary command or disrupt service.

e-Excellence U-Office Force file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker without logging the service can exploit this vulnerability to upload arbitrary files to perform arbitrary command or disrupt service.

EPSS

Процентиль: 67%
0.00548
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-434

Связанные уязвимости

CVSS3: 9.8
nvd
больше 2 лет назад

e-Excellence U-Office Force file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker without logging the service can exploit this vulnerability to upload arbitrary files to perform arbitrary command or disrupt service.

EPSS

Процентиль: 67%
0.00548
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-434