Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8495-rrmx-69vf

Опубликовано: 19 апр. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

OS Command Injection in TripleData Reporting Engine in Tripleplay Platform releases prior to Caveman 3.4.0 allows authenticated users to run unprivileged OS level commands via a crafted request payload.

OS Command Injection in TripleData Reporting Engine in Tripleplay Platform releases prior to Caveman 3.4.0 allows authenticated users to run unprivileged OS level commands via a crafted request payload.

EPSS

Процентиль: 78%
0.01169
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-78

Связанные уязвимости

CVSS3: 5.4
nvd
почти 3 года назад

OS Command Injection in TripleData Reporting Engine in Tripleplay Platform releases prior to Caveman 3.4.0 allows authenticated users to run unprivileged OS level commands via a crafted request payload.

EPSS

Процентиль: 78%
0.01169
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-78