Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5ppp-5mcp-fqfv

Опубликовано: 19 мар. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX APIs mediaclip.cgi and playclip.cgi was vulnerable for file globbing which could lead to a resource exhaustion attack. Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.

Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX APIs mediaclip.cgi and playclip.cgi was vulnerable for file globbing which could lead to a resource exhaustion attack. Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.

EPSS

Процентиль: 41%
0.00194
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-155

Связанные уязвимости

CVSS3: 6.5
nvd
почти 2 года назад

Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX APIs mediaclip.cgi and playclip.cgi was vulnerable for file globbing which could lead to a resource exhaustion attack. Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.

EPSS

Процентиль: 41%
0.00194
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-155