exploitDog

GHSA-3p96-wrm7-xc3m

Опубликовано: 12 июл. 2024

Источник: github

Github: Не прошло ревью

CVSS3: 8.8

Описание

An arbitrary file upload vulnerability in the component /admin/cmsTemplate/savePlaceMetaData of Public CMS v.4.0.202302.e allows attackers to execute arbitrary code via uploading a crafted file.

An arbitrary file upload vulnerability in the component /admin/cmsTemplate/savePlaceMetaData of Public CMS v.4.0.202302.e allows attackers to execute arbitrary code via uploading a crafted file.

Ссылки

EPSS

Процентиль: 69%

0.00619

Низкий

8.8 High

CVSS3

CVE ID

Дефекты

CWE-22

CWE-434

Связанные уязвимости

CVE-2024-40550

CVSS3: 8.8

nvd

больше 1 года назад

An arbitrary file upload vulnerability in the component /admin/cmsTemplate/savePlaceMetaData of Public CMS v.4.0.202302.e allows attackers to execute arbitrary code via uploading a crafted file.

EPSS

Процентиль: 69%

0.00619

Низкий

8.8 High

CVSS3

CVE ID

Дефекты

CWE-22

CWE-434