Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fmp7-6783-4ggp

Опубликовано: 24 июн. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

The CRUDDIY project is vulnerable to shell command injection via sending a crafted POST request to the application server.  The exploitation risk is limited since CRUDDIY is meant to be launched locally. Nevertheless, a user with the project running on their computer might visit a website which would send such a malicious request to the locally launched server.

The CRUDDIY project is vulnerable to shell command injection via sending a crafted POST request to the application server.  The exploitation risk is limited since CRUDDIY is meant to be launched locally. Nevertheless, a user with the project running on their computer might visit a website which would send such a malicious request to the locally launched server.

EPSS

Процентиль: 54%
0.00319
Низкий

8.8 High

CVSS3

Дефекты

CWE-77
CWE-78

Связанные уязвимости

CVSS3: 8.8
nvd
больше 1 года назад

The CRUDDIY project is vulnerable to shell command injection via sending a crafted POST request to the application server.  The exploitation risk is limited since CRUDDIY is meant to be launched locally. Nevertheless, a user with the project running on their computer might visit a website which would send such a malicious request to the locally launched server.

EPSS

Процентиль: 54%
0.00319
Низкий

8.8 High

CVSS3

Дефекты

CWE-77
CWE-78