Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7x5f-2xxg-4jm6

Опубликовано: 02 окт. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 3.3

Описание

A remote code execution vulnerability in the project management of Wanxing Technology's Yitu project which allows an attacker to use the exp.adpx file as a zip compressed file to construct a special file name, which can be used to decompress the project file into the system startup folder, restart the system, and automatically execute the constructed attack script.

A remote code execution vulnerability in the project management of Wanxing Technology's Yitu project which allows an attacker to use the exp.adpx file as a zip compressed file to construct a special file name, which can be used to decompress the project file into the system startup folder, restart the system, and automatically execute the constructed attack script.

EPSS

Процентиль: 77%
0.01053
Низкий

3.3 Low

CVSS3

Связанные уязвимости

CVSS3: 3.3
nvd
больше 1 года назад

A remote code execution vulnerability in the project management of Wanxing Technology's Yitu project which allows an attacker to use the exp.adpx file as a zip compressed file to construct a special file name, which can be used to decompress the project file into the system startup folder, restart the system, and automatically execute the constructed attack script.

EPSS

Процентиль: 77%
0.01053
Низкий

3.3 Low

CVSS3