Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hr8h-w3fr-52jv

Опубликовано: 16 мая 2025
Источник: github
Github: Не прошло ревью
CVSS4: 5.3
CVSS3: 6.3

Описание

A vulnerability classified as critical has been found in feng_ha_ha/megagao ssm-erp and production_ssm 1.0. This affects the function uploadPicture of the file PictureServiceImpl.java. The manipulation of the argument File leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This product is distributed under two entirely different names.

A vulnerability classified as critical has been found in feng_ha_ha/megagao ssm-erp and production_ssm 1.0. This affects the function uploadPicture of the file PictureServiceImpl.java. The manipulation of the argument File leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This product is distributed under two entirely different names.

EPSS

Процентиль: 13%
0.00043
Низкий

5.3 Medium

CVSS4

6.3 Medium

CVSS3

Дефекты

CWE-284

Связанные уязвимости

CVSS3: 6.3
nvd
9 месяцев назад

A vulnerability classified as critical has been found in feng_ha_ha/megagao ssm-erp and production_ssm 1.0. This affects the function uploadPicture of the file PictureServiceImpl.java. The manipulation of the argument File leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This product is distributed under two entirely different names.

EPSS

Процентиль: 13%
0.00043
Низкий

5.3 Medium

CVSS4

6.3 Medium

CVSS3

Дефекты

CWE-284