Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9xhg-4cw3-p79r

Опубликовано: 06 июл. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics application server hosts a web service using an operation with improper write access control that could allow to write data in any folder accessible to the account assigned to the website’s application pool.

A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics application server hosts a web service using an operation with improper write access control that could allow to write data in any folder accessible to the account assigned to the website’s application pool.

EPSS

Процентиль: 48%
0.00249
Низкий

7.5 High

CVSS3

Дефекты

CWE-610
CWE-73

Связанные уязвимости

CVSS3: 7.5
nvd
около 3 лет назад

A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics application server hosts a web service using an operation with improper write access control that could allow to write data in any folder accessible to the account assigned to the website’s application pool.

EPSS

Процентиль: 48%
0.00249
Низкий

7.5 High

CVSS3

Дефекты

CWE-610
CWE-73