Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4q3r-q67v-jf47

Опубликовано: 15 дек. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

SmartStar Software CWS is a web-based integration platform, its file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit this vulnerability to upload arbitrary files to perform arbitrary command or disrupt service.

SmartStar Software CWS is a web-based integration platform, its file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit this vulnerability to upload arbitrary files to perform arbitrary command or disrupt service.

EPSS

Процентиль: 66%
0.00507
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-434

Связанные уязвимости

CVSS3: 9.8
nvd
около 2 лет назад

SmartStar Software CWS is a web-based integration platform, its file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit this vulnerability to upload arbitrary files to perform arbitrary command or disrupt service.

EPSS

Процентиль: 66%
0.00507
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-434