Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7p22-frc8-w9h8

Опубликовано: 06 мар. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 6.9
CVSS3: 6.2

Описание

Surreal ToDo 0.6.1.2 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the content parameter. Attackers can supply directory traversal sequences through the content parameter in index.php to access sensitive system files like configuration and initialization files.

Surreal ToDo 0.6.1.2 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the content parameter. Attackers can supply directory traversal sequences through the content parameter in index.php to access sensitive system files like configuration and initialization files.

EPSS

Процентиль: 18%
0.00056
Низкий

6.9 Medium

CVSS4

6.2 Medium

CVSS3

Дефекты

CWE-22

Связанные уязвимости

CVSS3: 6.2
nvd
около 1 месяца назад

Surreal ToDo 0.6.1.2 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the content parameter. Attackers can supply directory traversal sequences through the content parameter in index.php to access sensitive system files like configuration and initialization files.

EPSS

Процентиль: 18%
0.00056
Низкий

6.9 Medium

CVSS4

6.2 Medium

CVSS3

Дефекты

CWE-22