Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7253-wxw3-45mw

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

lib/NSSDropbox.php in ZendTo prior to 5.22-2 Beta failed to properly check for equality when validating the session cookie, allowing an attacker to gain administrative access with a large number of requests.

lib/NSSDropbox.php in ZendTo prior to 5.22-2 Beta failed to properly check for equality when validating the session cookie, allowing an attacker to gain administrative access with a large number of requests.

EPSS

Процентиль: 76%
0.00919
Низкий

Связанные уязвимости

CVSS3: 9.8
nvd
почти 6 лет назад

lib/NSSDropbox.php in ZendTo prior to 5.22-2 Beta failed to properly check for equality when validating the session cookie, allowing an attacker to gain administrative access with a large number of requests.

EPSS

Процентиль: 76%
0.00919
Низкий