Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8jwr-jm4q-89xr

Опубликовано: 14 янв. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 6.6

Описание

An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in FortiSOAR IMAP connector version 3.5.7 and below may allow an authenticated attacker to execute unauthorized code or commands via a specifically crafted playbook

An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in FortiSOAR IMAP connector version 3.5.7 and below may allow an authenticated attacker to execute unauthorized code or commands via a specifically crafted playbook

EPSS

Процентиль: 76%
0.00919
Низкий

6.6 Medium

CVSS3

Дефекты

CWE-78

Связанные уязвимости

CVSS3: 6.6
nvd
около 1 года назад

An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in FortiSOAR IMAP connector version 3.5.7 and below may allow an authenticated attacker to execute unauthorized code or commands via a specifically crafted playbook

EPSS

Процентиль: 76%
0.00919
Низкий

6.6 Medium

CVSS3

Дефекты

CWE-78