Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-c279-wrgp-v9mg

Опубликовано: 15 июл. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 5.5

Описание

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

EPSS

Процентиль: 5%
0.00155
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 5.5
nvd
17 дней назад

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS3: 5.5
fstec
18 дней назад

Уязвимость наборов библиотек Content Credentials SDK, связанная с недостаточной проверкой входных данных, позволяющая нарушителю читать произвольные файлы

EPSS

Процентиль: 5%
0.00155
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-20