Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-cxj5-mwc8-g86c

Опубликовано: 16 апр. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 9.4

Описание

The Ready_ application's Profile section allows users to upload files of any type and extension without restriction. If the server is misconfigured, as it was by default when installed at the turn of 2021 and 2022, it can result in Remote Code Execution. Refer to the Required Configuration for Exposure section for more information.

The Ready_ application's Profile section allows users to upload files of any type and extension without restriction. If the server is misconfigured, as it was by default when installed at the turn of 2021 and 2022, it can result in Remote Code Execution. Refer to the Required Configuration for Exposure section for more information.

EPSS

Процентиль: 74%
0.00824
Низкий

9.4 Critical

CVSS4

Дефекты

CWE-434

Связанные уязвимости

nvd
10 месяцев назад

The Ready_ application's Profile section allows users to upload files of any type and extension without restriction. If the server is misconfigured, as it was by default when installed at the turn of 2021 and 2022, it can result in Remote Code Execution. Refer to the Required Configuration for Exposure section for more information.

EPSS

Процентиль: 74%
0.00824
Низкий

9.4 Critical

CVSS4

Дефекты

CWE-434