Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7r2g-px2q-wrcx

Опубликовано: 09 янв. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

In Area9 Rhapsode 1.47.3, an authenticated attacker can exploit the operation, url, and filename parameters via POST request to read arbitrary files from the server filesystem. Fixed in 1.47.4 (#7254) and further versions.

In Area9 Rhapsode 1.47.3, an authenticated attacker can exploit the operation, url, and filename parameters via POST request to read arbitrary files from the server filesystem. Fixed in 1.47.4 (#7254) and further versions.

EPSS

Процентиль: 10%
0.00034
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 6.5
nvd
29 дней назад

In Area9 Rhapsode 1.47.3, an authenticated attacker can exploit the operation, url, and filename parameters via POST request to read arbitrary files from the server filesystem. Fixed in 1.47.4 (#7254) and further versions.

EPSS

Процентиль: 10%
0.00034
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-125