Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-g8jg-vfp7-h8mr

Опубликовано: 24 нояб. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.5

Описание

A path traversal vulnerability was discovered in multiple Pilz products. An unauthenticated local attacker could use a zipped, malicious configuration file to trigger arbitrary file writes ('zip-slip').

A path traversal vulnerability was discovered in multiple Pilz products. An unauthenticated local attacker could use a zipped, malicious configuration file to trigger arbitrary file writes ('zip-slip').

EPSS

Процентиль: 14%
0.00047
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-22

Связанные уязвимости

CVSS3: 5.5
nvd
около 3 лет назад

A path traversal vulnerability was discovered in multiple Pilz products. An unauthenticated local attacker could use a zipped, malicious configuration file to trigger arbitrary file writes ('zip-slip'). File writes do not affect confidentiality or availability.

EPSS

Процентиль: 14%
0.00047
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-22