Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-cmv4-9rjr-99h2

Опубликовано: 26 авг. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 9.4

Описание

A path traversal vulnerability in unauthenticated upload functionality allows a malicious actor to upload binaries and scripts to the server’s configuration and web root directories, achieving remote code execution on the Unified PAM server.

A path traversal vulnerability in unauthenticated upload functionality allows a malicious actor to upload binaries and scripts to the server’s configuration and web root directories, achieving remote code execution on the Unified PAM server.

EPSS

Процентиль: 74%
0.00839
Низкий

9.4 Critical

CVSS3

Дефекты

CWE-22

Связанные уязвимости

redhat
4 месяца назад

A path traversal vulnerability in unauthenticated upload functionality allows a malicious actor to upload binaries and scripts to the server’s configuration and web root directories, achieving remote code execution on the Unified PAM server.

CVSS3: 9.4
nvd
4 месяца назад

A path traversal vulnerability in unauthenticated upload functionality allows a malicious actor to upload binaries and scripts to the server’s configuration and web root directories, achieving remote code execution on the Unified PAM server.

EPSS

Процентиль: 74%
0.00839
Низкий

9.4 Critical

CVSS3

Дефекты

CWE-22