Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-c78m-c7wq-r5w4

Опубликовано: 28 окт. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 2
CVSS3: 4.7

Описание

A weakness has been identified in Willow CMS up to 1.4.0. Impacted is an unknown function of the file /admin/images/add. This manipulation causes unrestricted upload. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited.

A weakness has been identified in Willow CMS up to 1.4.0. Impacted is an unknown function of the file /admin/images/add. This manipulation causes unrestricted upload. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited.

EPSS

Процентиль: 17%
0.00054
Низкий

2 Low

CVSS4

4.7 Medium

CVSS3

Дефекты

CWE-284
CWE-434

Связанные уязвимости

CVSS3: 4.7
nvd
3 месяца назад

A weakness has been identified in Willow CMS up to 1.4.0. Impacted is an unknown function of the file /admin/images/add. This manipulation causes unrestricted upload. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited.

EPSS

Процентиль: 17%
0.00054
Низкий

2 Low

CVSS4

4.7 Medium

CVSS3

Дефекты

CWE-284
CWE-434