Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-c8mf-x5fq-cwm5

Опубликовано: 22 апр. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 5.1
CVSS3: 6.1

Описание

The a+HCM developed by aEnrich has an Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload arbitrary files to any path, including HTML documents, which may result in a XSS-like effect.

The a+HCM developed by aEnrich has an Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload arbitrary files to any path, including HTML documents, which may result in a XSS-like effect.

EPSS

Процентиль: 11%
0.00208
Низкий

5.1 Medium

CVSS4

6.1 Medium

CVSS3

Дефекты

CWE-434

Связанные уязвимости

CVSS3: 6.1
nvd
4 месяца назад

The a+HCM developed by aEnrich has an Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload arbitrary files to any path, including HTML documents, which may result in a XSS-like effect.

EPSS

Процентиль: 11%
0.00208
Низкий

5.1 Medium

CVSS4

6.1 Medium

CVSS3

Дефекты

CWE-434