Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7v8x-4fxf-3hxx

Опубликовано: 26 апр. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8

Описание

IBM Planning Analytics Workspace 2.0 could be vulnerable to malicious file upload by not validating the file types or sizes. Attackers can make use of this weakness and upload malicious executable files into the system and it can be sent to victim for performing further attacks. IBM X-Force ID: 214025.

IBM Planning Analytics Workspace 2.0 could be vulnerable to malicious file upload by not validating the file types or sizes. Attackers can make use of this weakness and upload malicious executable files into the system and it can be sent to victim for performing further attacks. IBM X-Force ID: 214025.

EPSS

Процентиль: 39%
0.00177
Низкий

8 High

CVSS3

Дефекты

CWE-434

Связанные уязвимости

CVSS3: 8
nvd
почти 4 года назад

IBM Planning Analytics Workspace 2.0 could be vulnerable to malicious file upload by not validating the file types or sizes. Attackers can make use of this weakness and upload malicious executable files into the system and it can be sent to victim for performing further attacks. IBM X-Force ID: 214025.

EPSS

Процентиль: 39%
0.00177
Низкий

8 High

CVSS3

Дефекты

CWE-434