Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fmvm-7g4g-75c2

Опубликовано: 14 апр. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 6.9
CVSS3: 7.3

Описание

A vulnerability, which was classified as critical, has been found in veal98 小牛肉 Echo 开源社区系统 4.2. This issue affects the function uploadMdPic of the file /discuss/uploadMdPic. The manipulation of the argument editormd-image-file leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

A vulnerability, which was classified as critical, has been found in veal98 小牛肉 Echo 开源社区系统 4.2. This issue affects the function uploadMdPic of the file /discuss/uploadMdPic. The manipulation of the argument editormd-image-file leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

EPSS

Процентиль: 21%
0.00069
Низкий

6.9 Medium

CVSS4

7.3 High

CVSS3

Дефекты

CWE-284
CWE-79

Связанные уязвимости

CVSS3: 7.3
nvd
10 месяцев назад

A vulnerability, which was classified as critical, has been found in veal98 小牛肉 Echo 开源社区系统 4.2. This issue affects the function uploadMdPic of the file /discuss/uploadMdPic. The manipulation of the argument editormd-image-file leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

EPSS

Процентиль: 21%
0.00069
Низкий

6.9 Medium

CVSS4

7.3 High

CVSS3

Дефекты

CWE-284
CWE-79