Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-g23w-pc29-375j

Опубликовано: 15 июл. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 7.4

Описание

CAI Content Credentials is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page. Scope is changed.

CAI Content Credentials is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page. Scope is changed.

EPSS

Процентиль: 4%
0.00139
Низкий

7.4 High

CVSS3

Дефекты

CWE-426

Связанные уязвимости

CVSS3: 7.4
nvd
17 дней назад

CAI Content Credentials is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page. Scope is changed.

CVSS3: 7.4
fstec
18 дней назад

Уязвимость наборов библиотек Content Credentials SDK, связанная с использованием ненадёжного пути поиска, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 4%
0.00139
Низкий

7.4 High

CVSS3

Дефекты

CWE-426