Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4cgm-43x9-f8f3

Опубликовано: 27 нояб. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 9.3

Описание

The application contains an insecure 'redirectToUrl' mechanism that incorrectly processes the value of the 'redirectUrlParameter' parameter. The application interprets the entered string of characters as a Java expression, allowing an unauthenticated attacer to perform arbitrary code execution. This issue was fixed in version wu#2016.1.5513#0#20251014_113353

The application contains an insecure 'redirectToUrl' mechanism that incorrectly processes the value of the 'redirectUrlParameter' parameter. The application interprets the entered string of characters as a Java expression, allowing an unauthenticated attacer to perform arbitrary code execution. This issue was fixed in version wu#2016.1.5513#0#20251014_113353

EPSS

Процентиль: 31%
0.00117
Низкий

9.3 Critical

CVSS4

Дефекты

CWE-95

Связанные уязвимости

nvd
2 месяца назад

The application contains an insecure 'redirectToUrl' mechanism that incorrectly processes the value of the 'redirectUrlParameter' parameter. The application interprets the entered string of characters as a Java expression, allowing an unauthenticated attacer to perform arbitrary code execution. This issue was fixed in version wu#2016.1.5513#0#20251014_113353

EPSS

Процентиль: 31%
0.00117
Низкий

9.3 Critical

CVSS4

Дефекты

CWE-95