Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-c957-vcxp-6qqg

Опубликовано: 10 дек. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 8

Описание

An issue was discovered in Digi ConnectPort LTS before 1.4.12. A vulnerability in the file upload handling of a web application allows manipulation of file paths via POST requests. This can lead to arbitrary file uploads within specific directories, potentially enabling privilege escalation when combined with other vulnerabilities.

An issue was discovered in Digi ConnectPort LTS before 1.4.12. A vulnerability in the file upload handling of a web application allows manipulation of file paths via POST requests. This can lead to arbitrary file uploads within specific directories, potentially enabling privilege escalation when combined with other vulnerabilities.

EPSS

Процентиль: 40%
0.00181
Низкий

8 High

CVSS3

Дефекты

CWE-434

Связанные уязвимости

CVSS3: 8
nvd
около 1 года назад

An issue was discovered in Digi ConnectPort LTS before 1.4.12. A vulnerability in the file upload handling of a web application allows manipulation of file paths via POST requests. This can lead to arbitrary file uploads within specific directories, potentially enabling privilege escalation when combined with other vulnerabilities.

EPSS

Процентиль: 40%
0.00181
Низкий

8 High

CVSS3

Дефекты

CWE-434