Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-h96f-qxw6-vq8x

Опубликовано: 13 мая 2025
Источник: github
Github: Не прошло ревью
CVSS3: 8.6

Описание

NetAlertX 24.7.18 before 24.10.12 allows unauthenticated file reading because an HTTP client can ignore a redirect, and because of factors related to strpos and directory traversal, as exploited in the wild in May 2025. This is related to components/logs.php.

NetAlertX 24.7.18 before 24.10.12 allows unauthenticated file reading because an HTTP client can ignore a redirect, and because of factors related to strpos and directory traversal, as exploited in the wild in May 2025. This is related to components/logs.php.

EPSS

Процентиль: 99%
0.77983
Высокий

8.6 High

CVSS3

Дефекты

CWE-22
CWE-698

Связанные уязвимости

CVSS3: 8.6
nvd
9 месяцев назад

NetAlertX 24.7.18 before 24.10.12 allows unauthenticated file reading because an HTTP client can ignore a redirect, and because of factors related to strpos and directory traversal, as exploited in the wild in May 2025. This is related to components/logs.php.

CVSS3: 7.3
fstec
больше 1 года назад

Уязвимость сценария security.php сетевой инфраструктуры оповещения вторжений NetAlert X, позволяющая нарушителю читать произвольные файлы

EPSS

Процентиль: 99%
0.77983
Высокий

8.6 High

CVSS3

Дефекты

CWE-22
CWE-698