Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-653f-v7gf-v92q

Опубликовано: 28 дек. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

There is a path traversal vulnerability in Esri ArcGIS Server versions 10.9.1 and below. Successful exploitation may allow a remote, unauthenticated attacker traverse the file system to access files outside of the intended directory on ArcGIS Server. This could lead to the disclosure of sensitive site configuration information (not user datasets).

There is a path traversal vulnerability in Esri ArcGIS Server versions 10.9.1 and below. Successful exploitation may allow a remote, unauthenticated attacker traverse the file system to access files outside of the intended directory on ArcGIS Server. This could lead to the disclosure of sensitive site configuration information (not user datasets).

EPSS

Процентиль: 71%
0.00692
Низкий

7.5 High

CVSS3

Дефекты

CWE-22
CWE-23

Связанные уязвимости

CVSS3: 7.5
nvd
около 3 лет назад

There is a path traversal vulnerability in Esri ArcGIS Server versions 10.9.1 and below. Successful exploitation may allow a remote, unauthenticated attacker traverse the file system to access files outside of the intended directory on ArcGIS Server. This could lead to the disclosure of sensitive site configuration information (not user datasets).

EPSS

Процентиль: 71%
0.00692
Низкий

7.5 High

CVSS3

Дефекты

CWE-22
CWE-23