Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-c794-99vm-w4j9

Опубликовано: 04 июн. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.6

Описание

In Real Player 20.0.8.310, there is a DCP:// URI Remote Arbitrary Code Execution Vulnerability. This is an internal URL Protocol used by Real Player to reference a file that contains an URL. It is possible to inject script code to arbitrary domains. It is also possible to reference arbitrary local files.

In Real Player 20.0.8.310, there is a DCP:// URI Remote Arbitrary Code Execution Vulnerability. This is an internal URL Protocol used by Real Player to reference a file that contains an URL. It is possible to inject script code to arbitrary domains. It is also possible to reference arbitrary local files.

EPSS

Процентиль: 86%
0.02718
Низкий

9.6 Critical

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 9.6
nvd
больше 3 лет назад

In Real Player 20.0.8.310, there is a DCP:// URI Remote Arbitrary Code Execution Vulnerability. This is an internal URL Protocol used by Real Player to reference a file that contains an URL. It is possible to inject script code to arbitrary domains. It is also possible to reference arbitrary local files.

EPSS

Процентиль: 86%
0.02718
Низкий

9.6 Critical

CVSS3

Дефекты

CWE-79