Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-frmj-qjf3-xxj4

Опубликовано: 05 янв. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

An OS command injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow users to execute commands via a network.

We have already fixed the vulnerability in the following version: Video Station 5.7.2 ( 2023/11/23 ) and later

An OS command injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow users to execute commands via a network.

We have already fixed the vulnerability in the following version: Video Station 5.7.2 ( 2023/11/23 ) and later

EPSS

Процентиль: 40%
0.00183
Низкий

8.8 High

CVSS3

Дефекты

CWE-78

Связанные уязвимости

CVSS3: 8.8
nvd
около 2 лет назад

An OS command injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow users to execute commands via a network. We have already fixed the vulnerability in the following version: Video Station 5.7.2 ( 2023/11/23 ) and later

CVSS3: 8.8
fstec
больше 2 лет назад

Уязвимость приложения создания фотоальбомов Video Station, связанная с непринятием мер по нейтрализации специальных элементов, используемых в команде операционной системы, позволяющая нарушителю выполнить произвольные команды

EPSS

Процентиль: 40%
0.00183
Низкий

8.8 High

CVSS3

Дефекты

CWE-78