Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9x55-q22x-jwxq

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.3

Описание

sinopia, as used in SAP HANA XS 1.00 and 2.00, allows remote attackers to hijack npm packages or host arbitrary files by leveraging an insecure user creation policy, aka SAP Security Note 2407694.

sinopia, as used in SAP HANA XS 1.00 and 2.00, allows remote attackers to hijack npm packages or host arbitrary files by leveraging an insecure user creation policy, aka SAP Security Note 2407694.

EPSS

Процентиль: 65%
0.00494
Низкий

8.3 High

CVSS3

Связанные уязвимости

CVSS3: 8.3
nvd
больше 8 лет назад

sinopia, as used in SAP HANA XS 1.00 and 2.00, allows remote attackers to hijack npm packages or host arbitrary files by leveraging an insecure user creation policy, aka SAP Security Note 2407694.

EPSS

Процентиль: 65%
0.00494
Низкий

8.3 High

CVSS3