Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gvhp-4r57-55xm

Опубликовано: 21 мар. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

An issue was discovered in tramyardg autoexpress version 1.3.0, allows unauthenticated remote attackers to escalate privileges, update car data, delete vehicles, and upload car images via authentication bypass in uploadCarImages.php.

An issue was discovered in tramyardg autoexpress version 1.3.0, allows unauthenticated remote attackers to escalate privileges, update car data, delete vehicles, and upload car images via authentication bypass in uploadCarImages.php.

EPSS

Процентиль: 43%
0.00209
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-269

Связанные уязвимости

CVSS3: 9.8
nvd
почти 2 года назад

An issue was discovered in tramyardg autoexpress version 1.3.0, allows unauthenticated remote attackers to escalate privileges, update car data, delete vehicles, and upload car images via authentication bypass in uploadCarImages.php.

EPSS

Процентиль: 43%
0.00209
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-269