Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fgmq-h6gh-p5x7

Опубликовано: 21 авг. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 8.8

Описание

Missing authentication for a critical function in the upload API endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows an unauthenticated remote attacker to upload arbitrary files to the server's configured upload directory.

Missing authentication for a critical function in the upload API endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows an unauthenticated remote attacker to upload arbitrary files to the server's configured upload directory.

EPSS

Процентиль: 53%
0.00731
Низкий

8.8 High

CVSS4

Дефекты

CWE-306

Связанные уязвимости

nvd
около 2 месяцев назад

Missing authentication for a critical function in the upload API endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows an unauthenticated remote attacker to upload arbitrary files to the server's configured upload directory.

EPSS

Процентиль: 53%
0.00731
Низкий

8.8 High

CVSS4

Дефекты

CWE-306