Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8qf8-7w4h-xrpc

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Download of code without integrity check vulnerability in NEXACRO14 Runtime ActiveX control of tobesoft Co., Ltd allows the attacker to cause an arbitrary file download and execution. This vulnerability is due to incomplete validation of file download URL or file extension.

Download of code without integrity check vulnerability in NEXACRO14 Runtime ActiveX control of tobesoft Co., Ltd allows the attacker to cause an arbitrary file download and execution. This vulnerability is due to incomplete validation of file download URL or file extension.

EPSS

Процентиль: 46%
0.00233
Низкий

Дефекты

CWE-494

Связанные уязвимости

CVSS3: 8.8
nvd
больше 4 лет назад

Download of code without integrity check vulnerability in NEXACRO14 Runtime ActiveX control of tobesoft Co., Ltd allows the attacker to cause an arbitrary file download and execution. This vulnerability is due to incomplete validation of file download URL or file extension.

EPSS

Процентиль: 46%
0.00233
Низкий

Дефекты

CWE-494