Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-75jw-x33v-6vgm

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

aquaverde Aquarius CMS through 4.3.5 writes POST and GET parameters (including passwords) to a log file because of incorrect if/else usage in the Log-File writer component.

aquaverde Aquarius CMS through 4.3.5 writes POST and GET parameters (including passwords) to a log file because of incorrect if/else usage in the Log-File writer component.

EPSS

Процентиль: 54%
0.00316
Низкий

7.5 High

CVSS3

Дефекты

CWE-532

Связанные уязвимости

CVSS3: 7.5
nvd
почти 7 лет назад

Aquarius CMS through 4.3.5 writes POST and GET parameters (including passwords) to a log file due to an overwriting of configuration parameters under certain circumstances.

EPSS

Процентиль: 54%
0.00316
Низкий

7.5 High

CVSS3

Дефекты

CWE-532