Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3qcx-rj23-g86q

Опубликовано: 19 апр. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 4.8
CVSS3: 5.3

Описание

A vulnerability classified as critical has been found in thautwarm vscode-diana 0.0.1. Affected is an unknown function of the file Gen.py of the component Jinja2 Template Handler. The manipulation leads to injection. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.

A vulnerability classified as critical has been found in thautwarm vscode-diana 0.0.1. Affected is an unknown function of the file Gen.py of the component Jinja2 Template Handler. The manipulation leads to injection. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.

EPSS

Процентиль: 12%
0.00221
Низкий

4.8 Medium

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-74

Связанные уязвимости

CVSS3: 5.3
nvd
больше 1 года назад

A vulnerability classified as critical has been found in thautwarm vscode-diana 0.0.1. Affected is an unknown function of the file Gen.py of the component Jinja2 Template Handler. The manipulation leads to injection. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.

EPSS

Процентиль: 12%
0.00221
Низкий

4.8 Medium

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-74