Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4w7x-xp7v-5wc2

Опубликовано: 08 апр. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 5.1
CVSS3: 4.7

Описание

Unrestricted upload of file with dangerous type issue exists in MATCHA INVOICE 2.6.6 and earlier. If this vulnerability is exploited, an arbitrary file may be created by an administrator of the product. As a result, arbitrary code may be executed on the server.

Unrestricted upload of file with dangerous type issue exists in MATCHA INVOICE 2.6.6 and earlier. If this vulnerability is exploited, an arbitrary file may be created by an administrator of the product. As a result, arbitrary code may be executed on the server.

EPSS

Процентиль: 14%
0.00228
Низкий

5.1 Medium

CVSS4

4.7 Medium

CVSS3

Дефекты

CWE-434

Связанные уязвимости

CVSS3: 7.2
nvd
6 месяцев назад

Unrestricted upload of file with dangerous type issue exists in MATCHA INVOICE 2.6.6 and earlier. If this vulnerability is exploited, an arbitrary file may be created by an administrator of the product. As a result, arbitrary code may be executed on the server.

EPSS

Процентиль: 14%
0.00228
Низкий

5.1 Medium

CVSS4

4.7 Medium

CVSS3

Дефекты

CWE-434