Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6cqx-9v42-q8f8

Опубликовано: 05 сент. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

A file write vulnerability exists in the OAS Engine configuration functionality of Open Automation Software OAS Platform v18.00.0072. A specially crafted series of network requests can lead to arbitrary file creation or overwrite. An attacker can send a sequence of requests to trigger this vulnerability.

A file write vulnerability exists in the OAS Engine configuration functionality of Open Automation Software OAS Platform v18.00.0072. A specially crafted series of network requests can lead to arbitrary file creation or overwrite. An attacker can send a sequence of requests to trigger this vulnerability.

EPSS

Процентиль: 17%
0.00056
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-610
CWE-73

Связанные уязвимости

CVSS3: 6.5
nvd
больше 2 лет назад

A file write vulnerability exists in the OAS Engine configuration functionality of Open Automation Software OAS Platform v18.00.0072. A specially crafted series of network requests can lead to arbitrary file creation or overwrite. An attacker can send a sequence of requests to trigger this vulnerability.

EPSS

Процентиль: 17%
0.00056
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-610
CWE-73