Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-h5wc-fg2j-q78w

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

Signature Wrapping exists in OSCI-Transport 1.2 as used in OSCI Transport Library 1.6.1 (Java) and OSCI Transport Library 1.6 (.NET). An attacker with access to unencrypted OSCI protocol messages must send crafted protocol messages with duplicate IDs.

Signature Wrapping exists in OSCI-Transport 1.2 as used in OSCI Transport Library 1.6.1 (Java) and OSCI Transport Library 1.6 (.NET). An attacker with access to unencrypted OSCI protocol messages must send crafted protocol messages with duplicate IDs.

EPSS

Процентиль: 33%
0.00131
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-347

Связанные уязвимости

CVSS3: 6.5
nvd
больше 8 лет назад

Signature Wrapping exists in OSCI-Transport 1.2 as used in OSCI Transport Library 1.6.1 (Java) and OSCI Transport Library 1.6 (.NET). An attacker with access to unencrypted OSCI protocol messages must send crafted protocol messages with duplicate IDs.

EPSS

Процентиль: 33%
0.00131
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-347