Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4g6w-wv86-3h78

Опубликовано: 10 нояб. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

The file upload function of Agentflow BPM has insufficient filtering for special characters in URLs. An unauthenticated remote attacker can exploit this vulnerability to upload arbitrary file and execute arbitrary code to manipulate system or disrupt service.

The file upload function of Agentflow BPM has insufficient filtering for special characters in URLs. An unauthenticated remote attacker can exploit this vulnerability to upload arbitrary file and execute arbitrary code to manipulate system or disrupt service.

EPSS

Процентиль: 91%
0.061
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-434

Связанные уязвимости

CVSS3: 9.8
nvd
около 3 лет назад

The file upload function of Agentflow BPM has insufficient filtering for special characters in URLs. An unauthenticated remote attacker can exploit this vulnerability to upload arbitrary file and execute arbitrary code to manipulate system or disrupt service.

EPSS

Процентиль: 91%
0.061
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-434