Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hj7g-h883-x979

Опубликовано: 28 авг. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

A File Upload Validation Bypass vulnerability has been identified in the HCL BigFix SM, where the application fails to properly enforce file type restrictions during the upload process. An attacker may exploit this flaw to upload malicious or unauthorized files, such as scripts, executables, or web shells, by bypassing client-side or server-side validation mechanisms.

A File Upload Validation Bypass vulnerability has been identified in the HCL BigFix SM, where the application fails to properly enforce file type restrictions during the upload process. An attacker may exploit this flaw to upload malicious or unauthorized files, such as scripts, executables, or web shells, by bypassing client-side or server-side validation mechanisms.

EPSS

Процентиль: 8%
0.0003
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-434

Связанные уязвимости

CVSS3: 5.4
nvd
5 месяцев назад

A File Upload Validation Bypass vulnerability has been identified in the HCL BigFix SM, where the application fails to properly enforce file type restrictions during the upload process. An attacker may exploit this flaw to upload malicious or unauthorized files, such as scripts, executables, or web shells, by bypassing client-side or server-side validation mechanisms.

EPSS

Процентиль: 8%
0.0003
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-434