Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-g9fr-v3jx-9jph

Опубликовано: 19 окт. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 9

Описание

HCL Compass is vulnerable to lack of file upload security.  An attacker could upload files containing active code that can be executed by the server or by a user's web browser.

HCL Compass is vulnerable to lack of file upload security.  An attacker could upload files containing active code that can be executed by the server or by a user's web browser.

EPSS

Процентиль: 26%
0.00089
Низкий

9 Critical

CVSS3

Дефекты

CWE-434

Связанные уязвимости

CVSS3: 9
nvd
больше 2 лет назад

HCL Compass is vulnerable to lack of file upload security.  An attacker could upload files containing active code that can be executed by the server or by a user's web browser.

EPSS

Процентиль: 26%
0.00089
Низкий

9 Critical

CVSS3

Дефекты

CWE-434