Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9qfh-f8rq-x8wr

Опубликовано: 06 июн. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 9.9
CVSS3: 9.8

Описание

An unrestricted upload of file with dangerous type vulnerability in the upload file function of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to execute arbitrary system commands via a malicious file.

An unrestricted upload of file with dangerous type vulnerability in the upload file function of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to execute arbitrary system commands via a malicious file.

EPSS

Процентиль: 44%
0.00216
Низкий

9.9 Critical

CVSS4

9.8 Critical

CVSS3

Дефекты

CWE-434

Связанные уязвимости

CVSS3: 9.8
nvd
8 месяцев назад

An unrestricted upload of file with dangerous type vulnerability in the upload file function of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to execute arbitrary system commands via a malicious file.

EPSS

Процентиль: 44%
0.00216
Низкий

9.9 Critical

CVSS4

9.8 Critical

CVSS3

Дефекты

CWE-434