Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-c232-prcf-3728

Опубликовано: 12 сент. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 6.9
CVSS3: 5.3

Описание

NUP Portal developed by NewType Infortech has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly upload files. If the attacker manages to bypass the file extension restrictions, they could upload a webshell and execute it on the server side.

NUP Portal developed by NewType Infortech has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly upload files. If the attacker manages to bypass the file extension restrictions, they could upload a webshell and execute it on the server side.

EPSS

Процентиль: 29%
0.00103
Низкий

6.9 Medium

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-306

Связанные уязвимости

CVSS3: 5.3
nvd
5 месяцев назад

NUP Portal developed by NewType Infortech has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly upload files. If the attacker manages to bypass the file extension restrictions, they could upload a webshell and execute it on the server side.

EPSS

Процентиль: 29%
0.00103
Низкий

6.9 Medium

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-306