Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fw5q-5jr8-g3vh

Опубликовано: 26 авг. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

An arbitrary file write issue in the exfiltration endpoint in BYOB (Build Your Own Botnet) 2.0 allows attackers to overwrite SQLite databases and bypass authentication via an unauthenticated HTTP request with a crafted parameter. This occurs in file_add in api/files/routes.py.

An arbitrary file write issue in the exfiltration endpoint in BYOB (Build Your Own Botnet) 2.0 allows attackers to overwrite SQLite databases and bypass authentication via an unauthenticated HTTP request with a crafted parameter. This occurs in file_add in api/files/routes.py.

EPSS

Процентиль: 98%
0.50868
Средний

9.8 Critical

CVSS3

Дефекты

CWE-22

Связанные уязвимости

CVSS3: 9.8
nvd
больше 1 года назад

An arbitrary file write issue in the exfiltration endpoint in BYOB (Build Your Own Botnet) 2.0 allows attackers to overwrite SQLite databases and bypass authentication via an unauthenticated HTTP request with a crafted parameter. This occurs in file_add in api/files/routes.py.

EPSS

Процентиль: 98%
0.50868
Средний

9.8 Critical

CVSS3

Дефекты

CWE-22