Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-555q-7wq3-w6ch

Опубликовано: 28 янв. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 8.6

Описание

An attacker can bypass the sandboxing of Nasal scripts and arbitrarily write to any file path that the user has permission to modify at the operating-system level.

An attacker can bypass the sandboxing of Nasal scripts and arbitrarily write to any file path that the user has permission to modify at the operating-system level.

EPSS

Процентиль: 30%
0.00356
Низкий

8.6 High

CVSS3

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 9.9
ubuntu
почти 2 года назад

An attacker can bypass the sandboxing of Nasal scripts and arbitrarily write to any file path that the user has permission to modify at the operating-system level.

CVSS3: 9.9
nvd
почти 2 года назад

An attacker can bypass the sandboxing of Nasal scripts and arbitrarily write to any file path that the user has permission to modify at the operating-system level.

CVSS3: 9.9
debian
почти 2 года назад

An attacker can bypass the sandboxing of Nasal scripts and arbitrarily ...

CVSS3: 9.9
altlinux
больше 1 года назад

ALT-PU-2025-9248: package `SimGear` update to version 2024.1.1-alt1

CVSS3: 9.9
altlinux
больше 1 года назад

ALT-PU-2025-9246: package `FlightGear` update to version 2024.1.1-alt1

EPSS

Процентиль: 30%
0.00356
Низкий

8.6 High

CVSS3

Дефекты

CWE-863