Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fqgc-xggw-mh6h

Опубликовано: 08 мар. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

The webservices in Proofpoint Enterprise Protection (PPS/POD) contain a vulnerability that allows for an anonymous user to execute remote code through 'eval injection'. Exploitation requires network access to the webservices API, but such access is a non-standard configuration. This affects all versions 8.20.0 and below.

The webservices in Proofpoint Enterprise Protection (PPS/POD) contain a vulnerability that allows for an anonymous user to execute remote code through 'eval injection'. Exploitation requires network access to the webservices API, but such access is a non-standard configuration. This affects all versions 8.20.0 and below.

EPSS

Процентиль: 58%
0.00369
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-94
CWE-95

Связанные уязвимости

CVSS3: 9.8
nvd
почти 3 года назад

The webservices in Proofpoint Enterprise Protection (PPS/POD) contain a vulnerability that allows for an anonymous user to execute remote code through 'eval injection'. Exploitation requires network access to the webservices API, but such access is a non-standard configuration. This affects all versions 8.20.0 and below.

EPSS

Процентиль: 58%
0.00369
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-94
CWE-95