Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-f5gv-m2h2-fpc6

Опубликовано: 17 мар. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 6.3

Описание

A vulnerability was found in PandaXGO PandaX up to 20240310 and classified as critical. This issue affects the function ExportUser of the file /apps/system/api/user.go. The manipulation of the argument filename leads to path traversal: '../filedir'. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-257063.

A vulnerability was found in PandaXGO PandaX up to 20240310 and classified as critical. This issue affects the function ExportUser of the file /apps/system/api/user.go. The manipulation of the argument filename leads to path traversal: '../filedir'. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-257063.

EPSS

Процентиль: 21%
0.0007
Низкий

6.3 Medium

CVSS3

Дефекты

CWE-24

Связанные уязвимости

CVSS3: 6.3
nvd
почти 2 года назад

A vulnerability was found in PandaXGO PandaX up to 20240310 and classified as critical. This issue affects the function ExportUser of the file /apps/system/api/user.go. The manipulation of the argument filename leads to path traversal: '../filedir'. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-257063.

EPSS

Процентиль: 21%
0.0007
Низкий

6.3 Medium

CVSS3

Дефекты

CWE-24