Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-crmf-3vf5-7m36

Опубликовано: 29 окт. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 8.4
CVSS3: 7.8

Описание

The installer of WTW EAGLE (for Windows) 3.0.8.0 contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with the privileges of the running application.

The installer of WTW EAGLE (for Windows) 3.0.8.0 contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with the privileges of the running application.

EPSS

Процентиль: 4%
0.00018
Низкий

8.4 High

CVSS4

7.8 High

CVSS3

Дефекты

CWE-427

Связанные уязвимости

CVSS3: 7.8
nvd
3 месяца назад

The installer of WTW EAGLE (for Windows) 3.0.8.0 contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with the privileges of the running application.

EPSS

Процентиль: 4%
0.00018
Низкий

8.4 High

CVSS4

7.8 High

CVSS3

Дефекты

CWE-427