Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-c653-hqcq-9r8j

Опубликовано: 10 фев. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

The config restore function of Voipmonitor GUI before v24.96 does not properly check files sent as restore archives, allowing remote attackers to execute arbitrary commands via a crafted file in the web root.

The config restore function of Voipmonitor GUI before v24.96 does not properly check files sent as restore archives, allowing remote attackers to execute arbitrary commands via a crafted file in the web root.

EPSS

Процентиль: 88%
0.03913
Низкий

7.8 High

CVSS3

Дефекты

CWE-434

Связанные уязвимости

CVSS3: 8.8
nvd
около 4 лет назад

The config restore function of Voipmonitor GUI before v24.96 does not properly check files sent as restore archives, allowing remote attackers to execute arbitrary commands via a crafted file in the web root.

EPSS

Процентиль: 88%
0.03913
Низкий

7.8 High

CVSS3

Дефекты

CWE-434