Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8cwc-g9gg-qp9w

Опубликовано: 26 нояб. 2024
Источник: github
Github: Не прошло ревью
CVSS4: 9.3
CVSS3: 9.8

Описание

Valor Apps Easy Folder Listing Pro has a deserialization vulnerability that allows an unauthenticated, remote attacker to execute arbitrary code with the privileges of the Joomla! application. Fixed in versions 3.8 and 4.5.

Valor Apps Easy Folder Listing Pro has a deserialization vulnerability that allows an unauthenticated, remote attacker to execute arbitrary code with the privileges of the Joomla! application. Fixed in versions 3.8 and 4.5.

EPSS

Процентиль: 87%
0.03532
Низкий

9.3 Critical

CVSS4

9.8 Critical

CVSS3

Дефекты

CWE-502

Связанные уязвимости

CVSS3: 9.8
nvd
около 1 года назад

Valor Apps Easy Folder Listing Pro has a deserialization vulnerability that allows an unauthenticated, remote attacker to execute arbitrary code with the privileges of the Joomla! application. Fixed in versions 3.8 and 4.5.

EPSS

Процентиль: 87%
0.03532
Низкий

9.3 Critical

CVSS4

9.8 Critical

CVSS3

Дефекты

CWE-502