Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-895x-rw6g-623x

Опубликовано: 15 апр. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.2

Описание

The file upload functionality of Ai3 QbiBot does not properly restrict types of uploaded files, allowing remote attackers with administrator privilege to upload files with dangerous type containing malicious code.

The file upload functionality of Ai3 QbiBot does not properly restrict types of uploaded files, allowing remote attackers with administrator privilege to upload files with dangerous type containing malicious code.

EPSS

Процентиль: 53%
0.00304
Низкий

7.2 High

CVSS3

Дефекты

CWE-434

Связанные уязвимости

CVSS3: 7.2
nvd
почти 2 года назад

The file upload functionality of Ai3 QbiBot does not properly restrict types of uploaded files, allowing remote attackers with administrator privilege to upload files with dangerous type containing malicious code.

EPSS

Процентиль: 53%
0.00304
Низкий

7.2 High

CVSS3

Дефекты

CWE-434