Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-72wm-hh56-9gp6

Опубликовано: 26 фев. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 9.6

Описание

Attacker, with permission to submit a link or submits a link via POST to be collected that is using the file:// protocol can then introspect host files and other relatively stored files.

Attacker, with permission to submit a link or submits a link via POST to be collected that is using the file:// protocol can then introspect host files and other relatively stored files.

EPSS

Процентиль: 41%
0.00195
Низкий

9.6 Critical

CVSS3

Дефекты

CWE-918

Связанные уязвимости

CVSS3: 6.5
nvd
почти 2 года назад

Attacker, with permission to submit a link or submits a link via POST to be collected that is using the file:// protocol can then introspect host files and other relatively stored files.

EPSS

Процентиль: 41%
0.00195
Низкий

9.6 Critical

CVSS3

Дефекты

CWE-918