Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9hrf-3267-3v6p

Опубликовано: 16 июн. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

Bludit v3.14.1 was discovered to contain an arbitrary file upload vulnerability in the component /admin/new-content. This vulnerability allows attackers to execute arbitrary web scripts or HTML via uploading a crafted SVG file.

Bludit v3.14.1 was discovered to contain an arbitrary file upload vulnerability in the component /admin/new-content. This vulnerability allows attackers to execute arbitrary web scripts or HTML via uploading a crafted SVG file.

EPSS

Процентиль: 66%
0.00504
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-434

Связанные уязвимости

CVSS3: 5.4
nvd
больше 2 лет назад

Bludit v3.14.1 was discovered to contain an arbitrary file upload vulnerability in the component /admin/new-content. This vulnerability allows attackers to execute arbitrary web scripts or HTML via uploading a crafted SVG file. NOTE: the product's security model is that users are trusted by the administrator to insert arbitrary content (users cannot create their own accounts through self-registration).

EPSS

Процентиль: 66%
0.00504
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-434