Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-c73g-3g4c-hhq6

Опубликовано: 03 янв. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.6

Описание

HCL DRYiCE MyXalytics is impacted by path traversal vulnerability which allows file upload capability.  Certain endpoints permit users to manipulate the path (including the file name) where these files are stored on the server.

HCL DRYiCE MyXalytics is impacted by path traversal vulnerability which allows file upload capability.  Certain endpoints permit users to manipulate the path (including the file name) where these files are stored on the server.

EPSS

Процентиль: 24%
0.00081
Низкий

7.6 High

CVSS3

Дефекты

CWE-22

Связанные уязвимости

CVSS3: 7.6
nvd
около 2 лет назад

HCL DRYiCE MyXalytics is impacted by path traversal vulnerability which allows file upload capability.  Certain endpoints permit users to manipulate the path (including the file name) where these files are stored on the server.

EPSS

Процентиль: 24%
0.00081
Низкий

7.6 High

CVSS3

Дефекты

CWE-22