Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fm2j-6967-6fqw

Опубликовано: 24 июн. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 9.1

Описание

Yoga Class Registration System version 1.0 allows an administrator to execute commands on the server. This is possible because the application does not correctly validate the thumbnails of the classes uploaded by the administrators.

Yoga Class Registration System version 1.0 allows an administrator to execute commands on the server. This is possible because the application does not correctly validate the thumbnails of the classes uploaded by the administrators.

EPSS

Процентиль: 23%
0.00078
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-434

Связанные уязвимости

CVSS3: 9.1
nvd
больше 2 лет назад

Yoga Class Registration System version 1.0 allows an administrator to execute commands on the server. This is possible because the application does not correctly validate the thumbnails of the classes uploaded by the administrators.

EPSS

Процентиль: 23%
0.00078
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-434