Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hp2w-q4f4-jq5w

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

The DBMail driver in the Password plugin in Roundcube before 1.1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the password.

The DBMail driver in the Password plugin in Roundcube before 1.1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the password.

EPSS

Процентиль: 86%
0.02743
Низкий

8.8 High

CVSS3

Дефекты

CWE-74

Связанные уязвимости

CVSS3: 8.8
ubuntu
около 9 лет назад

The DBMail driver in the Password plugin in Roundcube before 1.1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the password.

CVSS3: 8.8
nvd
около 9 лет назад

The DBMail driver in the Password plugin in Roundcube before 1.1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the password.

CVSS3: 8.8
debian
около 9 лет назад

The DBMail driver in the Password plugin in Roundcube before 1.1.0 all ...

EPSS

Процентиль: 86%
0.02743
Низкий

8.8 High

CVSS3

Дефекты

CWE-74