Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3qcx-rj23-g86q

Опубликовано: 19 апр. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 4.8
CVSS3: 5.3

Описание

A vulnerability classified as critical has been found in thautwarm vscode-diana 0.0.1. Affected is an unknown function of the file Gen.py of the component Jinja2 Template Handler. The manipulation leads to injection. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.

A vulnerability classified as critical has been found in thautwarm vscode-diana 0.0.1. Affected is an unknown function of the file Gen.py of the component Jinja2 Template Handler. The manipulation leads to injection. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.

EPSS

Процентиль: 13%
0.00044
Низкий

4.8 Medium

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-74

Связанные уязвимости

CVSS3: 5.3
nvd
10 месяцев назад

A vulnerability classified as critical has been found in thautwarm vscode-diana 0.0.1. Affected is an unknown function of the file Gen.py of the component Jinja2 Template Handler. The manipulation leads to injection. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.

EPSS

Процентиль: 13%
0.00044
Низкий

4.8 Medium

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-74