Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-c89j-4hr5-cjph

Опубликовано: 02 мая 2025
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

IBM Concert Software 1.0.0 through 1.0.5 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.

IBM Concert Software 1.0.0 through 1.0.5 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.

EPSS

Процентиль: 21%
0.0007
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-22

Связанные уязвимости

CVSS3: 5.3
nvd
9 месяцев назад

IBM Concert Software 1.0.0 through 1.0.5 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.

EPSS

Процентиль: 21%
0.0007
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-22