Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-f5vv-hcgf-xvxq

Опубликовано: 29 июн. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

Orthanc before 1.12.0 allows authenticated users with access to the Orthanc API to overwrite arbitrary files on the file system, and in specific deployment scenarios allows the attacker to overwrite the configuration, which can be exploited to trigger Remote Code Execution (RCE).

Orthanc before 1.12.0 allows authenticated users with access to the Orthanc API to overwrite arbitrary files on the file system, and in specific deployment scenarios allows the attacker to overwrite the configuration, which can be exploited to trigger Remote Code Execution (RCE).

EPSS

Процентиль: 95%
0.2101
Средний

8.8 High

CVSS3

Дефекты

CWE-94

Связанные уязвимости

CVSS3: 8.8
ubuntu
больше 2 лет назад

Orthanc before 1.12.0 allows authenticated users with access to the Orthanc API to overwrite arbitrary files on the file system, and in specific deployment scenarios allows the attacker to overwrite the configuration, which can be exploited to trigger Remote Code Execution (RCE).

CVSS3: 8.8
nvd
больше 2 лет назад

Orthanc before 1.12.0 allows authenticated users with access to the Orthanc API to overwrite arbitrary files on the file system, and in specific deployment scenarios allows the attacker to overwrite the configuration, which can be exploited to trigger Remote Code Execution (RCE).

CVSS3: 8.8
debian
больше 2 лет назад

Orthanc before 1.12.0 allows authenticated users with access to the Or ...

EPSS

Процентиль: 95%
0.2101
Средний

8.8 High

CVSS3

Дефекты

CWE-94