Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9p2g-j2pw-qg9p

Опубликовано: 20 фев. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

An arbitrary file upload vulnerability in the component /sysFile/upload of Novel-Plus v4.3.0-RC1 allows attackers to execute arbitrary code via uploading a crafted file.

An arbitrary file upload vulnerability in the component /sysFile/upload of Novel-Plus v4.3.0-RC1 allows attackers to execute arbitrary code via uploading a crafted file.

EPSS

Процентиль: 47%
0.00243
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-434

Связанные уязвимости

CVSS3: 9.8
nvd
почти 2 года назад

An arbitrary file upload vulnerability in the component /sysFile/upload of Novel-Plus v4.3.0-RC1 allows attackers to execute arbitrary code via uploading a crafted file.

EPSS

Процентиль: 47%
0.00243
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-434