Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-g6gp-xc9x-p59q

Опубликовано: 20 окт. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 9.3

Описание

An unrestricted upload of file with dangerous type vulnerability in the upload file function of Galaxy Software Services Corporation Vitals ESP Forum Module through 1.3 version allows remote authenticated users to execute arbitrary system commands via a malicious file.

An unrestricted upload of file with dangerous type vulnerability in the upload file function of Galaxy Software Services Corporation Vitals ESP Forum Module through 1.3 version allows remote authenticated users to execute arbitrary system commands via a malicious file.

EPSS

Процентиль: 44%
0.00219
Низкий

9.3 Critical

CVSS4

Дефекты

CWE-434

Связанные уязвимости

nvd
4 месяца назад

An unrestricted upload of file with dangerous type vulnerability in the upload file function of Galaxy Software Services Corporation Vitals ESP Forum Module through 1.3 version allows remote authenticated users to execute arbitrary system commands via a malicious file.

EPSS

Процентиль: 44%
0.00219
Низкий

9.3 Critical

CVSS4

Дефекты

CWE-434