Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gmcp-v2jv-3qq3

Опубликовано: 09 нояб. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

Uncontrolled Search Path Element in CLUSTERPRO X 5.0 for Windows and earlier, EXPRESSCLUSTER X 5.0 for Windows and earlier, CLUSTERPRO X 5.0 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER X 5.0 SingleServerSafe for Windows and earlier allows a remote unauthenticated attacker to overwrite existing files on the file system and to potentially execute arbitrary code.

Uncontrolled Search Path Element in CLUSTERPRO X 5.0 for Windows and earlier, EXPRESSCLUSTER X 5.0 for Windows and earlier, CLUSTERPRO X 5.0 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER X 5.0 SingleServerSafe for Windows and earlier allows a remote unauthenticated attacker to overwrite existing files on the file system and to potentially execute arbitrary code.

EPSS

Процентиль: 82%
0.01639
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-427

Связанные уязвимости

CVSS3: 9.8
nvd
около 3 лет назад

Uncontrolled Search Path Element in CLUSTERPRO X 5.0 for Windows and earlier, EXPRESSCLUSTER X 5.0 for Windows and earlier, CLUSTERPRO X 5.0 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER X 5.0 SingleServerSafe for Windows and earlier allows a remote unauthenticated attacker to overwrite existing files on the file system and to potentially execute arbitrary code.

EPSS

Процентиль: 82%
0.01639
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-427