Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-737x-q9xp-w8ch

Опубликовано: 08 апр. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

aEnrich a+HRD has inadequate filtering for special characters in URLs. An unauthenticated remote attacker can bypass authentication and perform path traversal attacks to access arbitrary files under website root directory.

aEnrich a+HRD has inadequate filtering for special characters in URLs. An unauthenticated remote attacker can bypass authentication and perform path traversal attacks to access arbitrary files under website root directory.

EPSS

Процентиль: 49%
0.00259
Низкий

7.5 High

CVSS3

Дефекты

CWE-22

Связанные уязвимости

CVSS3: 7.5
nvd
почти 4 года назад

aEnrich a+HRD has inadequate filtering for special characters in URLs. An unauthenticated remote attacker can bypass authentication and perform path traversal attacks to access arbitrary files under website root directory.

EPSS

Процентиль: 49%
0.00259
Низкий

7.5 High

CVSS3

Дефекты

CWE-22