Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-45gh-mj8m-cxx5

Опубликовано: 22 нояб. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

An issue was discovered in Appalti & Contratti 9.12.2. The target web applications allow Local File Inclusion in any page relying on the href parameter to specify the JSP page to be rendered. This affects ApriPagina.do POST and GET requests to each application.

An issue was discovered in Appalti & Contratti 9.12.2. The target web applications allow Local File Inclusion in any page relying on the href parameter to specify the JSP page to be rendered. This affects ApriPagina.do POST and GET requests to each application.

EPSS

Процентиль: 50%
0.00266
Низкий

7.5 High

CVSS3

Дефекты

CWE-98

Связанные уязвимости

CVSS3: 7.5
nvd
около 3 лет назад

An issue was discovered in Appalti & Contratti 9.12.2. The target web applications allow Local File Inclusion in any page relying on the href parameter to specify the JSP page to be rendered. This affects ApriPagina.do POST and GET requests to each application.

EPSS

Процентиль: 50%
0.00266
Низкий

7.5 High

CVSS3

Дефекты

CWE-98