Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7rfh-x78j-cqj5

Опубликовано: 25 окт. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.1

Описание

A remote file download issue can occur in some capabilities of Esri ArcGIS Server web services that may in some edge cases allow a remote, unauthenticated attacker to induce an unsuspecting victim to launch a process in the victim's PATH environment. Current browsers provide users with warnings against running unsigned executables downloaded from the internet.

A remote file download issue can occur in some capabilities of Esri ArcGIS Server web services that may in some edge cases allow a remote, unauthenticated attacker to induce an unsuspecting victim to launch a process in the victim's PATH environment. Current browsers provide users with warnings against running unsigned executables downloaded from the internet.

EPSS

Процентиль: 42%
0.00198
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-494

Связанные уязвимости

CVSS3: 6.1
nvd
больше 3 лет назад

A remote file download issue can occur in some capabilities of Esri ArcGIS Server web services that may in some edge cases allow a remote, unauthenticated attacker to induce an unsuspecting victim to launch a process in the victim's PATH environment. Current browsers provide users with warnings against running unsigned executables downloaded from the internet.

EPSS

Процентиль: 42%
0.00198
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-494