Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fc9r-7hhq-7wqj

Опубликовано: 04 янв. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 8

Описание

An issue was discovered in Optimizely EPiServer.CMS.Core before 12.32.0. A medium-severity vulnerability exists in the CMS, where the application does not properly validate uploaded files. This allows the upload of potentially malicious file types, including .docm .html. When accessed by application users, these files can be used to execute malicious actions or compromise users' systems.

An issue was discovered in Optimizely EPiServer.CMS.Core before 12.32.0. A medium-severity vulnerability exists in the CMS, where the application does not properly validate uploaded files. This allows the upload of potentially malicious file types, including .docm .html. When accessed by application users, these files can be used to execute malicious actions or compromise users' systems.

EPSS

Процентиль: 41%
0.00192
Низкий

8 High

CVSS3

Дефекты

CWE-434

Связанные уязвимости

CVSS3: 8
nvd
около 1 года назад

An issue was discovered in Optimizely EPiServer.CMS.Core before 12.32.0. A medium-severity vulnerability exists in the CMS, where the application does not properly validate uploaded files. This allows the upload of potentially malicious file types, including .docm .html. When accessed by application users, these files can be used to execute malicious actions or compromise users' systems.

EPSS

Процентиль: 41%
0.00192
Низкий

8 High

CVSS3

Дефекты

CWE-434