Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6gc9-w97g-whgj

Опубликовано: 20 июн. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

File Upload vulnerability in PluckCMS v.4.7.10 dev versions allows a remote attacker to execute arbitrary code via a crafted image file to the the save_file() parameter.

File Upload vulnerability in PluckCMS v.4.7.10 dev versions allows a remote attacker to execute arbitrary code via a crafted image file to the the save_file() parameter.

EPSS

Процентиль: 69%
0.00605
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-434

Связанные уязвимости

CVSS3: 9.8
nvd
больше 2 лет назад

File Upload vulnerability in PluckCMS v.4.7.10 dev versions allows a remote attacker to execute arbitrary code via a crafted image file to the the save_file() parameter.

EPSS

Процентиль: 69%
0.00605
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-434