Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-cm4v-xxmw-47xm

Опубликовано: 04 окт. 2024
Источник: github
Github: Не прошло ревью
CVSS4: 9.3
CVSS3: 9.8

Описание

The web service for ONS-S8 - Spectra Aggregation Switch includes functions which do not properly validate user input, allowing an attacker to traverse directories, bypass authentication, and execute remote code.

The web service for ONS-S8 - Spectra Aggregation Switch includes functions which do not properly validate user input, allowing an attacker to traverse directories, bypass authentication, and execute remote code.

EPSS

Процентиль: 19%
0.00061
Низкий

9.3 Critical

CVSS4

9.8 Critical

CVSS3

Дефекты

CWE-98

Связанные уязвимости

CVSS3: 9.8
nvd
больше 1 года назад

The web service for ONS-S8 - Spectra Aggregation Switch includes functions which do not properly validate user input, allowing an attacker to traverse directories, bypass authentication, and execute remote code.

EPSS

Процентиль: 19%
0.00061
Низкий

9.3 Critical

CVSS4

9.8 Critical

CVSS3

Дефекты

CWE-98