Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-96m4-p356-68w4

Опубликовано: 28 июл. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 7.2
CVSS3: 7.8

Описание

Prior to version 25.4.270.0, a local authenticated attacker can manipulate user profile files to add illegitimate challenge response codes into the local user registry under certain conditions. This allows users with the ability to edit their user profile files to elevate their privileges to administrator.

Prior to version 25.4.270.0, a local authenticated attacker can manipulate user profile files to add illegitimate challenge response codes into the local user registry under certain conditions. This allows users with the ability to edit their user profile files to elevate their privileges to administrator.

EPSS

Процентиль: 1%
0.00012
Низкий

7.2 High

CVSS4

7.8 High

CVSS3

Дефекты

CWE-268

Связанные уязвимости

CVSS3: 7.8
nvd
6 месяцев назад

Prior to version 25.4.270.0, a local authenticated attacker can manipulate user profile files to add illegitimate challenge response codes into the local user registry under certain conditions. This allows users with the ability to edit their user profile files to elevate their privileges to administrator.

EPSS

Процентиль: 1%
0.00012
Низкий

7.2 High

CVSS4

7.8 High

CVSS3

Дефекты

CWE-268