Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-f4q4-prrr-6rxf

Опубликовано: 29 нояб. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

DreamMaker from Interinfo has a Path Traversal vulnerability and does not restrict the types of uploaded files. This allows unauthenticated remote attackers to upload arbitrary files to any directory, leading to arbitrary code execution by uploading webshells.

DreamMaker from Interinfo has a Path Traversal vulnerability and does not restrict the types of uploaded files. This allows unauthenticated remote attackers to upload arbitrary files to any directory, leading to arbitrary code execution by uploading webshells.

EPSS

Процентиль: 85%
0.02699
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-434

Связанные уязвимости

CVSS3: 9.8
nvd
около 1 года назад

DreamMaker from Interinfo has a Path Traversal vulnerability and does not restrict the types of uploaded files. This allows unauthenticated remote attackers to upload arbitrary files to any directory, leading to arbitrary code execution by uploading webshells.

EPSS

Процентиль: 85%
0.02699
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-434