Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4xhw-hgxg-4gjh

Опубликовано: 25 мар. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

The Reporting module in Aseco Lietuva document management system DVS Avilys before 2022-03-10 allows unauthorized file download. An unauthenticated attacker can impersonate an administrator by reading administrative files.

The Reporting module in Aseco Lietuva document management system DVS Avilys before 2022-03-10 allows unauthorized file download. An unauthenticated attacker can impersonate an administrator by reading administrative files.

EPSS

Процентиль: 76%
0.00964
Низкий

7.5 High

CVSS3

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 7.5
nvd
почти 4 года назад

The Reporting module in Aseco Lietuva document management system DVS Avilys before 3.5.58 allows unauthorized file download. An unauthenticated attacker can impersonate an administrator by reading administrative files.

EPSS

Процентиль: 76%
0.00964
Низкий

7.5 High

CVSS3

Дефекты

CWE-200