Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-j2hp-qmrf-626c

Опубликовано: 03 дек. 2021
Источник: github
Github: Не прошло ревью

Описание

Authenticated users with Administrator or Developer roles may execute OS commands by Groovy Script which uses Groovy lib to render a webpage. The groovy script does not have security restrictions, which will cause attackers to execute arbitrary commands remotely(RCE).

Authenticated users with Administrator or Developer roles may execute OS commands by Groovy Script which uses Groovy lib to render a webpage. The groovy script does not have security restrictions, which will cause attackers to execute arbitrary commands remotely(RCE).

EPSS

Процентиль: 60%
0.00391
Низкий

Дефекты

CWE-913

Связанные уязвимости

CVSS3: 4.2
nvd
около 4 лет назад

Authenticated users with Administrator or Developer roles may execute OS commands by Groovy Script which uses Groovy lib to render a webpage. The groovy script does not have security restrictions, which will cause attackers to execute arbitrary commands remotely(RCE).

EPSS

Процентиль: 60%
0.00391
Низкий

Дефекты

CWE-913