Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9xq2-9jc3-2mjw

Опубликовано: 22 нояб. 2024
Источник: github
Github: Не прошло ревью
CVSS4: 8.7
CVSS3: 9.8

Описание

A link following vulnerability has been reported to affect QuLog Center. If exploited, the vulnerability could allow remote attackers to traverse the file system to unintended locations and read or overwrite the contents of unexpected files.

We have already fixed the vulnerability in the following versions: QuLog Center 1.7.0.831 ( 2024/10/15 ) and later QuLog Center 1.8.0.888 ( 2024/10/15 ) and later

A link following vulnerability has been reported to affect QuLog Center. If exploited, the vulnerability could allow remote attackers to traverse the file system to unintended locations and read or overwrite the contents of unexpected files.

We have already fixed the vulnerability in the following versions: QuLog Center 1.7.0.831 ( 2024/10/15 ) and later QuLog Center 1.8.0.888 ( 2024/10/15 ) and later

EPSS

Процентиль: 78%
0.01149
Низкий

8.7 High

CVSS4

9.8 Critical

CVSS3

Дефекты

CWE-59

Связанные уязвимости

CVSS3: 9.8
nvd
около 1 года назад

A link following vulnerability has been reported to affect QuLog Center. If exploited, the vulnerability could allow remote attackers to traverse the file system to unintended locations and read or overwrite the contents of unexpected files. We have already fixed the vulnerability in the following versions: QuLog Center 1.7.0.831 ( 2024/10/15 ) and later QuLog Center 1.8.0.888 ( 2024/10/15 ) and later

EPSS

Процентиль: 78%
0.01149
Низкий

8.7 High

CVSS4

9.8 Critical

CVSS3

Дефекты

CWE-59