Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-93cp-72p2-5f74

Опубликовано: 16 окт. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

SolarWinds Serv-U is vulnerable to a directory traversal vulnerability where remote code execution is possible depending on privileges given to the authenticated user. This issue requires a user to be authenticated and this is present when software environment variables are abused. Authentication is required for this vulnerability

SolarWinds Serv-U is vulnerable to a directory traversal vulnerability where remote code execution is possible depending on privileges given to the authenticated user. This issue requires a user to be authenticated and this is present when software environment variables are abused. Authentication is required for this vulnerability

EPSS

Процентиль: 93%
0.10247
Средний

7.5 High

CVSS3

Дефекты

CWE-22

Связанные уязвимости

CVSS3: 7.5
nvd
больше 1 года назад

SolarWinds Serv-U is vulnerable to a directory traversal vulnerability where remote code execution is possible depending on privileges given to the authenticated user. This issue requires a user to be authenticated and this is present when software environment variables are abused. Authentication is required for this vulnerability

CVSS3: 7.5
fstec
больше 1 года назад

Уязвимость файлового сервера SolarWinds Serv-U File Server, связанная с неверным ограничением имени пути к каталогу с ограниченным доступом, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 93%
0.10247
Средний

7.5 High

CVSS3

Дефекты

CWE-22