Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3rw5-8gq9-qr7c

Опубликовано: 31 мая 2023
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

Fox-IT DataDiode (aka Fox DataDiode) 3.4.3 suffers from a path traversal vulnerability with resultant arbitrary writing of files. A remote attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the downstream node user. Exploitation of this issue does not require user interaction.

Fox-IT DataDiode (aka Fox DataDiode) 3.4.3 suffers from a path traversal vulnerability with resultant arbitrary writing of files. A remote attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the downstream node user. Exploitation of this issue does not require user interaction.

EPSS

Процентиль: 84%
0.02128
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-22

Связанные уязвимости

CVSS3: 9.8
nvd
больше 2 лет назад

Fox-IT DataDiode (aka Fox DataDiode) 3.4.3 suffers from a path traversal vulnerability with resultant arbitrary writing of files. A remote attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the downstream node user. Exploitation of this issue does not require user interaction.

EPSS

Процентиль: 84%
0.02128
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-22