Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-j6hf-hmj6-c2wc

Опубликовано: 25 сент. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

Directory Traversal vulnerability in itechyou dreamer CMS v.4.1.3 allows a remote attacker to execute arbitrary code via the themePath in the uploaded template function.

Directory Traversal vulnerability in itechyou dreamer CMS v.4.1.3 allows a remote attacker to execute arbitrary code via the themePath in the uploaded template function.

EPSS

Процентиль: 86%
0.02724
Низкий

8.8 High

CVSS3

Дефекты

CWE-22

Связанные уязвимости

CVSS3: 8.8
nvd
больше 2 лет назад

Directory Traversal vulnerability in itechyou dreamer CMS v.4.1.3 allows a remote attacker to execute arbitrary code via the themePath in the uploaded template function.

EPSS

Процентиль: 86%
0.02724
Низкий

8.8 High

CVSS3

Дефекты

CWE-22