Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6fjf-g26h-9mff

Опубликовано: 26 июн. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 0

Описание

A path traversal vulnerability in System Information Reporter (SIR) 1.0.3 and prior allowed an authenticated high privileged user to issue malicious ePO post requests to System Information Reporter, leading to creation of files anywhere on the filesystem and possibly overwriting existing files and exposing sensitive information disclosure.

A path traversal vulnerability in System Information Reporter (SIR) 1.0.3 and prior allowed an authenticated high privileged user to issue malicious ePO post requests to System Information Reporter, leading to creation of files anywhere on the filesystem and possibly overwriting existing files and exposing sensitive information disclosure.

EPSS

Процентиль: 2%
0.00014
Низкий

0 Low

CVSS4

Дефекты

CWE-22

Связанные уязвимости

nvd
8 месяцев назад

A path traversal vulnerability in System Information Reporter (SIR) 1.0.3 and prior allowed an authenticated high privileged user to issue malicious ePO post requests to System Information Reporter, leading to creation of files anywhere on the filesystem and possibly overwriting existing files and exposing sensitive information disclosure.

EPSS

Процентиль: 2%
0.00014
Низкий

0 Low

CVSS4

Дефекты

CWE-22