Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-chxf-xv64-xxfr

Опубликовано: 22 мая 2024
Источник: github
Github: Не прошло ревью
CVSS3: 6.6

Описание

Code injection vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12 and Ver.3.0.x series versions prior to Ver.3.0.32. If this vulnerability is exploited, a user with an administrator or higher privilege who can log in to the product may execute an arbitrary command on the server.

Code injection vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12 and Ver.3.0.x series versions prior to Ver.3.0.32. If this vulnerability is exploited, a user with an administrator or higher privilege who can log in to the product may execute an arbitrary command on the server.

EPSS

Процентиль: 73%
0.00751
Низкий

6.6 Medium

CVSS3

Дефекты

CWE-94

Связанные уязвимости

CVSS3: 6.6
nvd
больше 1 года назад

Code injection vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12 and Ver.3.0.x series versions prior to Ver.3.0.32. If this vulnerability is exploited, a user with an administrator or higher privilege who can log in to the product may execute an arbitrary command on the server.

EPSS

Процентиль: 73%
0.00751
Низкий

6.6 Medium

CVSS3

Дефекты

CWE-94