Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6428-3gjw-r4ph

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

SAP OrientDB, version 3.0, allows an authenticated attacker with script execute/write permissions to inject code that can be executed by the application and lead to Code Injection. An attacker could thereby control the behavior of the application.

SAP OrientDB, version 3.0, allows an authenticated attacker with script execute/write permissions to inject code that can be executed by the application and lead to Code Injection. An attacker could thereby control the behavior of the application.

EPSS

Процентиль: 57%
0.00356
Низкий

Дефекты

CWE-94

Связанные уязвимости

CVSS3: 7.2
nvd
почти 6 лет назад

SAP OrientDB, version 3.0, allows an authenticated attacker with script execute/write permissions to inject code that can be executed by the application and lead to Code Injection. An attacker could thereby control the behavior of the application.

EPSS

Процентиль: 57%
0.00356
Низкий

Дефекты

CWE-94