Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5g6v-28xg-q6hr

Опубликовано: 10 мая 2023
Источник: github
Github: Не прошло ревью
CVSS3: 4.1

Описание

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to create folders in arbitrary paths of the file system.

See SEL Service Bulletin dated 2022-11-15 for more details.

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to create folders in arbitrary paths of the file system.

See SEL Service Bulletin dated 2022-11-15 for more details.

EPSS

Процентиль: 42%
0.00199
Низкий

4.1 Medium

CVSS3

Дефекты

CWE-22

Связанные уязвимости

CVSS3: 4.1
nvd
больше 2 лет назад

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a remote authenticated attacker to create folders in arbitrary paths of the file system. See SEL Service Bulletin dated 2022-11-15 for more details.

EPSS

Процентиль: 42%
0.00199
Низкий

4.1 Medium

CVSS3

Дефекты

CWE-22