Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6ggc-x6gh-4w9h

Опубликовано: 27 мар. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

SCM Software is a client and server application. An Authenticated System manager client can execute LINQ query in the SCM server, for customized filtering. An Authenticated malicious client can send a specially crafted code to skip the validation and execute arbitrary code (RCE) on the SCM Server remotely. Malicious clients can execute any command by using this RCE vulnerability.

SCM Software is a client and server application. An Authenticated System manager client can execute LINQ query in the SCM server, for customized filtering. An Authenticated malicious client can send a specially crafted code to skip the validation and execute arbitrary code (RCE) on the SCM Server remotely. Malicious clients can execute any command by using this RCE vulnerability.

EPSS

Процентиль: 49%
0.00259
Низкий

7.5 High

CVSS3

Дефекты

CWE-94

Связанные уязвимости

CVSS3: 7.5
nvd
почти 2 года назад

SCM Software is a client and server application. An Authenticated System manager client can execute LINQ query in the SCM server, for customized filtering. An Authenticated malicious client can send a specially crafted code to skip the validation and execute arbitrary code (RCE) on the SCM Server remotely. Malicious clients can execute any command by using this RCE vulnerability.

EPSS

Процентиль: 49%
0.00259
Низкий

7.5 High

CVSS3

Дефекты

CWE-94