Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4xpq-wqf9-p6mv

Опубликовано: 27 нояб. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

Arcserve UDP prior to 9.2 contains a path traversal vulnerability in com.ca.arcflash.ui.server.servlet.FileHandlingServlet.doUpload(). An unauthenticated remote attacker can exploit it to upload arbitrary files to any location on the file system where the UDP agent is installed.

Arcserve UDP prior to 9.2 contains a path traversal vulnerability in com.ca.arcflash.ui.server.servlet.FileHandlingServlet.doUpload(). An unauthenticated remote attacker can exploit it to upload arbitrary files to any location on the file system where the UDP agent is installed.

EPSS

Процентиль: 79%
0.01245
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-22

Связанные уязвимости

CVSS3: 9.8
nvd
около 2 лет назад

Arcserve UDP prior to 9.2 contains a path traversal vulnerability in com.ca.arcflash.ui.server.servlet.FileHandlingServlet.doUpload(). An unauthenticated remote attacker can exploit it to upload arbitrary files to any location on the file system where the UDP agent is installed.

EPSS

Процентиль: 79%
0.01245
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-22