Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hjpq-vr77-qp94

Опубликовано: 26 мар. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

OS command injection vulnerability exists in ffBull ver.4.11, which may allow a remote unauthenticated attacker to execute an arbitrary OS command with the privilege of the running web server. Note that the developer was unreachable, therefore, users should consider stop using ffBull ver.4.11.

OS command injection vulnerability exists in ffBull ver.4.11, which may allow a remote unauthenticated attacker to execute an arbitrary OS command with the privilege of the running web server. Note that the developer was unreachable, therefore, users should consider stop using ffBull ver.4.11.

EPSS

Процентиль: 74%
0.00852
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-78

Связанные уязвимости

CVSS3: 9.8
nvd
почти 2 года назад

OS command injection vulnerability exists in ffBull ver.4.11, which may allow a remote unauthenticated attacker to execute an arbitrary OS command with the privilege of the running web server. Note that the developer was unreachable, therefore, users should consider stop using ffBull ver.4.11.

EPSS

Процентиль: 74%
0.00852
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-78