Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3xxj-rv47-9w5r

Опубликовано: 05 мар. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 8.1

Описание

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Chroma chroma allows PHP Local File Inclusion.This issue affects Chroma: from n/a through <= 1.11.

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Chroma chroma allows PHP Local File Inclusion.This issue affects Chroma: from n/a through <= 1.11.

EPSS

Процентиль: 35%
0.00151
Низкий

8.1 High

CVSS3

Дефекты

CWE-98

Связанные уязвимости

CVSS3: 8.1
nvd
около 1 месяца назад

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Chroma chroma allows PHP Local File Inclusion.This issue affects Chroma: from n/a through <= 1.11.

EPSS

Процентиль: 35%
0.00151
Низкий

8.1 High

CVSS3

Дефекты

CWE-98