Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fwfm-f7pg-rq6r

Опубликовано: 12 дек. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 3.5

Описание

SAP Master Data Governance File Upload application allows an attacker to exploit insufficient validation of path information provided by users, thus characters representing ‘traverse to parent directory’ are passed through to the file APIs. As a result, it has a low impact to the confidentiality.

SAP Master Data Governance File Upload application allows an attacker to exploit insufficient validation of path information provided by users, thus characters representing ‘traverse to parent directory’ are passed through to the file APIs. As a result, it has a low impact to the confidentiality.

EPSS

Процентиль: 30%
0.00113
Низкий

3.5 Low

CVSS3

Дефекты

CWE-22

Связанные уязвимости

CVSS3: 3.5
nvd
около 2 лет назад

SAP Master Data Governance File Upload application allows an attacker to exploit insufficient validation of path information provided by users, thus characters representing ‘traverse to parent directory’ are passed through to the file APIs. As a result, it has a low impact to the confidentiality.

EPSS

Процентиль: 30%
0.00113
Низкий

3.5 Low

CVSS3

Дефекты

CWE-22