Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5wfp-vx7w-jx9r

Опубликовано: 27 мар. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

HGiga OAKlouds file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit this vulnerability to upload and run arbitrary executable files to perform arbitrary command or disrupt service.

HGiga OAKlouds file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit this vulnerability to upload and run arbitrary executable files to perform arbitrary command or disrupt service.

EPSS

Процентиль: 69%
0.00596
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-434

Связанные уязвимости

CVSS3: 9.8
nvd
почти 3 года назад

HGiga OAKlouds file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit this vulnerability to upload and run arbitrary executable files to perform arbitrary command or disrupt service.

CVSS3: 9.8
fstec
почти 3 года назад

Уязвимость функции загрузки файлов системы корпоративного облачного хранилища HGiga OAKlouds, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 69%
0.00596
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-434