Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-h4j3-v76m-hmm4

Опубликовано: 27 июл. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 8.5
CVSS3: 9.1

Описание

An input validation vulnerability exists in an API component of the orchestrator. An authenticated user can exploit this flaw to manipulate backend queries, which may result in unauthorized access to data beyond their intended privileges and cause the underlying system to initiate unintended outbound network connections.

This issue was discovered internally by Arista and the company is not aware of any malicious uses of this issue in customer networks.

An input validation vulnerability exists in an API component of the orchestrator. An authenticated user can exploit this flaw to manipulate backend queries, which may result in unauthorized access to data beyond their intended privileges and cause the underlying system to initiate unintended outbound network connections.

This issue was discovered internally by Arista and the company is not aware of any malicious uses of this issue in customer networks.

EPSS

Процентиль: 85%
0.02826
Низкий

8.5 High

CVSS4

9.1 Critical

CVSS3

Дефекты

CWE-89

Связанные уязвимости

CVSS3: 9.1
nvd
3 дня назад

An input validation vulnerability exists in an API component of the orchestrator. An authenticated user can exploit this flaw to manipulate backend queries, which may result in unauthorized access to data beyond their intended privileges and cause the underlying system to initiate unintended outbound network connections. This issue was discovered internally by Arista and the company is not aware of any malicious uses of this issue in customer networks.

EPSS

Процентиль: 85%
0.02826
Низкий

8.5 High

CVSS4

9.1 Critical

CVSS3

Дефекты

CWE-89