exploitDog

GHSA-6mpm-3752-992x

Опубликовано: 28 июн. 2022

Источник: github

Github: Не прошло ревью

CVSS3: 9.8

Описание

Halo CMS v1.5.3 was discovered to contain an arbitrary file upload vulnerability via the component /api/admin/attachments/upload.

Halo CMS v1.5.3 was discovered to contain an arbitrary file upload vulnerability via the component /api/admin/attachments/upload.

Ссылки

EPSS

Процентиль: 65%

0.00499

Низкий

9.8 Critical

CVSS3

CVE ID

Дефекты

CWE-434

Связанные уязвимости

CVE-2022-32994

CVSS3: 9.8

nvd

больше 3 лет назад

Halo CMS v1.5.3 was discovered to contain an arbitrary file upload vulnerability via the component /api/admin/attachments/upload.

EPSS

Процентиль: 65%

0.00499

Низкий

9.8 Critical

CVSS3

CVE ID

Дефекты

CWE-434