Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8x47-7hq5-rq2m

Опубликовано: 27 апр. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 8.4

Описание

There is a DDE injection vulnerability in the GoldenDB database product. Attackers can inject DDE expressions through the interface, and when users download and open the affected file, the DDE commands can be executed.

There is a DDE injection vulnerability in the GoldenDB database product. Attackers can inject DDE expressions through the interface, and when users download and open the affected file, the DDE commands can be executed.

EPSS

Процентиль: 13%
0.00042
Низкий

8.4 High

CVSS3

Дефекты

CWE-94

Связанные уязвимости

CVSS3: 8.4
nvd
10 месяцев назад

There is a DDE injection vulnerability in the GoldenDB database product. Attackers can inject DDE expressions through the interface, and when users download and open the affected file, the DDE commands can be executed.

EPSS

Процентиль: 13%
0.00042
Низкий

8.4 High

CVSS3

Дефекты

CWE-94